A security infraction occurs when any knowing, willful, or negligent action contradicts EO 13526, but does not compromise a violation.

A security infraction occurs when any knowing, willful, or negligent action contradicts EO 13526, but does not compromise a violation.

• A. True
• B. False
• C. Not specified
• D. Unknown

Answer: (A)

Under EO 13526, a security infraction is defined by a knowing, willful, or negligent action that violates the terms of the order, regardless of whether any classified information was actually compromised. The key idea is that the wrongdoing is the breach of the policy itself, not only the outcome. So, even if no information was exposed or compromised, the act can still be considered a security infraction if it contradicts the requirements of EO 13526. For example, handling classified material improperly or sharing access in a way that violates the order would qualify as an infraction even if no disclosure occurred. That is why the statement is true.

Under EO 13526, a security infraction is defined by a knowing, willful, or negligent action that violates the terms of the order, regardless of whether any classified information was actually compromised. The key idea is that the wrongdoing is the breach of the policy itself, not only the outcome. So, even if no information was exposed or compromised, the act can still be considered a security infraction if it contradicts the requirements of EO 13526. For example, handling classified material improperly or sharing access in a way that violates the order would qualify as an infraction even if no disclosure occurred. That is why the statement is true.