ELLSWORTHAFBVA17-1 governs reporting procedures for negligent disclosure of classified information, PII breaches, malware, and phishing.
View ELLSWORTHAFBVA17-1 on armypubs.army.mil
ELLSWORTHAFBVA17-1 covers network incident reporting for classified data spillage, personally identifiable information breaches, computer viruses and malware, and phishing emails or telephone calls. It specifies reporting actions, notification contacts, system handling, and information to provide during suspected malware incidents.
NDCI occurs when classified data has been sent and/or received over a network with a lower classification level.
A breach is defined as a loss of control, compromise, unauthorized disclosure / acquisition / access of PII.
Attempt to SAFEGUARD the information; recall message, inform recipients not to forward or allow others to view. Track/annotate who you contacted.
Personnel should not click on any prompts, close any windows, or shut down the system. (paragraph 6)
If a message appears on the monitor of the affected system - WRITE IT DOWN! (paragraph 6)