Pursuant to CBP regulations regarding CBP's Office of Information Technology Security (CBP SOC), what must a broker do when there is a breach of physical records related to the broker's customs business?
How to get there
19 CFR 111.21(b)Each broker must provide notification to the CBP Office of Information Technology Security Operations Center (CBP SOC) of any known breach of electronic or physical records relating to the broker's customs business. Notification must be electronically provided ([email protected]) within 72 hours of the discovery of the breach, including any known compromised importer identification numbers … Within ten (10) business days of the notification, a broker must electronically provide an updated list of any additional known compromised importer identification numbers. …
Physical records are covered, and the requirement is electronic notice to CBP SOC within 72 hours, together with known compromised importer numbers. The answer is A.
Why the other choices are wrong
B) Electronically and by mail: the rule requires electronic notice only. Mail adds a requirement that isn't in the rule.
C) Processing Center; suspend client operations: the notice goes to CBP SOC, not the processing Center, and nothing requires suspending operations.
D) Executive Assistant Commissioner within 10 days: wrong recipient and wrong deadline. The 10 business days apply only to the follow-up list of additional compromised numbers.
Tip
Breach = SOC, 72 hours, electronic. Follow-up list: 10 business days. New information later: another 72 hours.
Sources: 19 CFR 111.21(b) (eCFR).
CBP answer key: Answer A · 19 CFR 111.21(b)Source: CBP past exams ↗