In a pure mathematical attack, (i.e., lacking any other information to help break a cipher) two factors above all count: 1  Computational power available, i.e., the computing power which can be brought to bear on the problem. 2  Key size, i.e., the size of key used to encrypt a message.
OMB's guidance to agencies requires them to report each PII-related breach to DHS's U.S. Computer Emergency Readiness Team (US-CERT) within 1 hour of discovery. However, complete information from most incidents can take days or months to compile; therefore preparing a meaningful report within 1 hour can be infeasible.
â  Contact your privacy coordinator or supervisor as. soon as you suspect or have an actual loss or com-. promise of PII. â  Report all incidents involving actual or suspected. breaches/compromises of PII to. http://www.us-cert.gov within one hour of discovery. â  Report all incidents involving actual or suspected.