When must a breach be reported to the US CERT?

A breach must be reported to the U.S. Computer Emergency Readiness Team (US-CERT) when it involves a significant incident that impacts federal systems, networks, or data, or when it poses a potential threat to national security or public safety. Additionally, federal agencies and certain critical infrastructure sectors are required to report incidents that could compromise sensitive information or disrupt operations. Timely reporting is essential to facilitate coordinated responses and mitigate further risks.