What is a COMSEC incident?

• A. A cyber intrusion affecting unclassified data
• B. A routine maintenance event
• C. A cryptographic, personnel, or physical event that may jeopardize security of COMSEC material
• D. An ordinary equipment malfunction

Answer: (C)

A COMSEC incident is any event that may jeopardize the security of COMSEC material, including cryptographic keys, devices, and the physical or personnel security surrounding them. It covers cryptographic, personnel, or physical aspects where something could compromise confidentiality, integrity, or availability of COMSEC material.

So, the best choice recognizes that the risk can arise from cryptographic material itself, from the people who handle it, or from the secure environments and equipment used to protect it. For example, loss or exposure of encryption keys, tampering with secure devices, or unauthorized access to a controlled security area would all be COMSEC incidents because they threaten the safeguards around COMSEC material.

In contrast, a cyber intrusion that only affects unclassified data doesn’t automatically involve COMSEC material, routine maintenance is not a security event, and a normal equipment malfunction is not inherently a COMSEC risk unless it specifically jeopardizes cryptographic material or security of the COMSEC process.