In a pure mathematical attack, (i.e., lacking any other information to help break a cipher) two factors above all count: 1  Computational power available, i.e., the computing power which can be brought to bear on the problem. 2  Key size, i.e., the size of key used to encrypt a message.
OMB's guidance to agencies requires them to report each PII-related breach to DHS's U.S. Computer Emergency Readiness Team (US-CERT) within 1 hour of discovery. However, complete information from most incidents can take days or months to compile; therefore preparing a meaningful report within 1 hour can be infeasible.
When to send a report. You have to send a suspicious transaction report to us, within 30 days from the day you suspect that a transaction or attempted transaction could be related to a money laundering offence or a terrorist financing offence. The suspicious transaction can be in any amount. This reporting obligation also extends to your employee, unless your employee reports their suspicion to a superior. If the suspicious transaction is not reported to a superior, your employee has an obligation to complete and send us a paper copy of the report.