Incident of Security Concern (IOSC)

An action (or inaction) contrary to S&S requirements and which meets DOE reporting requirements because it poses a threat to national security or DOE security assets (e.g., property, personnel, information, capabilities). IOSCs are categorized based on significance as A (more significant) or B (less significant) and type. The IOSC type is based on whether compromise or loss occurred; Security Interest (SI), loss or compromise occurred or is suspected, Procedural Interest (PI), a procedural noncompliance that did not result in loss or compromise, or Management Interest (MI), an IOSC reported primarily for management awareness. In addition to regulatory reporting requirements, Procedural Interest and Security Interest IOSCs require a formal inquiry to mitigate the effects and determine the nature, cause, impact, extent, and corrective actions to prevent recurrence.