True or False: Any incident that involves compromised PII must be reported to US-CERT within one hour regardless of the incident category reporting time frame.

• A. True
• B. False
• C. It depends on the category
• D. Not specified

Answer: (A)

When PII is compromised, the risk to individuals is immediate and significant, so incident response treats it as a top priority. Reporting to US-CERT quickly enables rapid threat awareness, coordination, and containment actions across responders and partners. Because of this urgency, the guidance uses a one-hour window for incidents involving compromised PII, even if other incident categories have longer reporting timelines. The goal is to minimize exposure and prevent attackers from continuing to cause harm before responders are alerted. Therefore, the statement is correct: any incident with compromised PII should be reported to US-CERT within one hour, regardless of the usual category-specific reporting timeframe.