§ 1017.23 - Lost or misplaced documents; violations of security by Commission employees.

(a) If any employee becomes aware that a document containing CBI is lost or otherwise unaccounted for, he/she shall immediately notify the DCO. If the document is not located within eight working hours, the DCO shall refer the matter to the Security Officer and the AEDHS for processing in accordance with paragraphs (b) through (e) of this section.

(b) If an employee intentionally or unintentionally violates or apparently violates the security provisions of this part the Security Officer shall investigate the violations or apparent violations, and report the matter to the DCO and the AEDHS. The AEDHS shall immediately notify the Executive Director and the General Counsel.

(c) If the investigation by the Security Officer uncovers a violation of the security requirements of this part and there is no evidence of any unauthorized disclosure, the Security Officer shall inform the DCO and the AEDHS.

(d) If the investigation by the Security Officer uncovers the probable unauthorized disclosure of CBI, the Security Officer immediately shall inform the DCO and the AEDHS. The AEDHS shall immediately notify the Executive Director and the General Counsel.

(e) If the Executive Director determines that there is a suspected or actual unauthorized compromise of CBI, he/she shall immediately notify the Chief, Security Management Support Division, EPA, and the affected business.

(f) If the investigation by the Security Officer uncovers information reflecting a possible criminal violation, the Security Officer will immediately inform the AEDHS and DCO. The AEDHS shall immediately inform the Executive Director, and the General Counsel. If there is evidence of a criminal violation, the General Counsel shall refer the matter to the Department of Justice pursuant to 28 U.S.C. 535.