COMSEC incident reporting should be conducted in accordance with EKMS documentation. Which EKMS version is referenced?

• A. EKMS 2A
• B. EKMS 3C
• C. EKMS 1B
• D. EKMS 1A

Answer: (C)

COMSEC incident reporting follows the documented procedures in EKMS, and the edition that defines how these reports are handled is EKMS 1B. This version standardizes what information to capture (such as date, type of incident, assets involved), who must be notified, and the timelines for escalation and closure, ensuring consistent handling across units. While newer EKMS editions (like 2A or 3C) broaden coverage of other topics, the incident reporting framework most commonly referenced in training is EKMS 1B. Earlier editions such as EKMS 1A didn’t provide the same standardized reporting details.