32 CFR §2400.33

1. (a)Any person who has knowledge of the loss or possible compromise of classified information shall immediately report the circumstances to the Security Officer. The Security Officer shall notify the Director and the agency that originated the information as soon as possible so that a damage assessment may be conducted and appropriate measures taken to negate or minimize any adverse effect of the compromise.
2. (b)The Security Officer shall initiate an inquiry to:
   1. (1)Determine cause,
   2. (2)Place responsibility, and
   3. (3)Take corrective measures and appropriate administrative, disciplinary, or legal action.
3. (c)The Security Officer shall keep the Director advised on the details of the inquiry.