Home / Past exams / April 2026 / Question 16
April 2026, question 16
Broker Compliance · Broker licensing and duties
In the event of a cyberbreach of electronic records relating to customs business, when must the customs broker report the breach to CBP following the discovery of the breach?
- Within 72 hours
- Within 10 calendar days
- Within 10 business days
- Within 30 calendar days
Show the answer and walk-through
CBP's answer: A. A: Within 72 hours
A broker must notify the CBP Security Operations Center of any known breach of records relating to its customs business within 72 hours of discovering it (111.21(b)), so A is right. The 10-business-day period in the same paragraph is only for the follow-up list of additional compromised importer identification numbers.
Notification must be electronically provided (cbpsoc@cbp.dhs.gov) within 72 hours of the discovery of the breach 19 CFR 111.21(b)
Search for: within 72 hours of the discovery of the breach
CBP's key cites: 19 CFR 111.21(b)
Question and key from CBP's April 2026 exam and answer key. The walk-through is ours; quotes are from the pinned editions in the reference viewer (HTSUS 2026 Basic, 19 CFR 2025 edition).