Who is responsible for establishing procedures to ensure that COMSEC material incidents are reported promptly to the specified authorities?

• A. Director, Communications Security Material System (DCMS)
• B. Defense Intelligence Agency
• C. National Security Agency
• D. Chief Information Officer

Answer: (A)

Establishing how COMSEC incidents are reported to the designated authorities is the responsibility of the Director, Communications Security Material System. This office oversees the COMSEC program and sets the specific procedures, timelines, contacts, and required information so incidents are reported promptly and routed to the appropriate authorities. The other entities shown do not hold this policy-setting role: the Defense Intelligence Agency focuses on intelligence operations, the National Security Agency administers cryptologic and security functions but does not establish the COMSEC incident reporting framework, and the Chief Information Officer handles broader IT governance rather than specialized COMSEC incident procedures.