May 2024 — Question 11

Pursuant to CBP regulations regarding CBP's Office of Information Technology Security (CBP SOC), what must a broker do when there is a breach of physical records related to the broker's customs business?

• ANotify electronically the CBP Office of Information Technology Security Operations Center (CBP SOC) within 72 hours of the discovery and provide CBP SOC with any known compromised importer identification numbers.✓ CBP's answer
• BNotify electronically and by mail CBP SOC within 72 hours of the discovery and provide CBP SOC any known compromised importer identification numbers.
• CNotify the broker's assigned processing Center within 72 hours of the discovery and let their clients know their operations are temporarily suspended.
• DNotify the CBP Executive Assistant Commissioner within ten (10) days of the discovery and provide any known compromised importer identification numbers.