How is a security infraction different from a security violation?
A security infraction is a security incident that does NOT result in — and could not reasonably be expected to result in — the loss or compromise of classified information. A security violation does result in, or could reasonably result in, such loss or compromise, so it is the more serious event.
The answer
Under Department of Defense security policy, the difference between the two terms comes down to a single question: could classified information have been lost or compromised?
- A security infraction is a failure to follow security requirements that does not result in, and could not reasonably be expected to result in, the loss, compromise, or suspected compromise of classified information. It is a procedural lapse with no realistic exposure of the data.
- A security violation is a failure that does result in — or could reasonably be expected to result in — the loss, compromise, or suspected compromise of classified information. The information was actually put at risk.
Both are types of security incidents, and both must be reported. The dividing line is the potential for compromise, not the intent or the paperwork.
Concrete examples
Infraction: leaving a classified document face-down on your desk while you step to a printer in the same closed, cleared area where everyone present holds the proper clearance and need-to-know. The rule was broken, but the information was never realistically exposed.
Violation: emailing a Secret document over an unclassified network, leaving a safe open and unattended in a common hallway, or losing a classified laptop. In each case an uncleared person could reasonably have gained access, so compromise is possible or suspected.
Why the softer readings are wrong
Students often assume the difference is intent — that a violation must be deliberate and an infraction accidental. That is incorrect. A violation can be entirely accidental (a genuine mistake that still exposes classified data), and intent is only one factor a security manager weighs when deciding consequences. The classifying criterion is the potential for compromise, not the state of mind.
Another common error is treating an infraction as a non-event that needs no action. Every infraction is still recorded and may require a preliminary inquiry to confirm that no compromise occurred; a pattern of infractions can itself trigger administrative action, including effects on a clearance.
The bigger picture
When an incident is reported, security personnel conduct a preliminary inquiry to determine which category applies. If compromise is confirmed or suspected, it becomes a violation and a fuller investigation follows, potentially with damage assessment and reporting to the original classification authority. Violations are investigated by the organization's security manager or servicing security office, and serious cases can involve counterintelligence or law enforcement. Repeated or negligent violations are among the adjudicative concerns that can lead to suspension or revocation of a security clearance — which is why the infraction-versus-violation distinction matters far beyond a paperwork label.
- 1
Was a security requirement broken?
If no rule was broken, there is no security incident at all — no infraction and no violation.
- 2
Could classified information have been lost or compromised?
- 3
No realistic potential for compromise
- 4
Loss, compromise, or suspected compromise is possible or occurred
Frequently asked
Does a security infraction require an investigation?
An infraction requires a preliminary inquiry to confirm that no loss or compromise of classified information actually occurred, but it does not trigger the full investigation that a violation does. It is documented and tracked so that repeated infractions can be addressed.
What are examples of security violations?
Emailing classified material over an unclassified network, leaving a security container (safe) open and unattended, losing a classified document or device, or discussing classified information over an unsecured phone. Each creates a real or suspected compromise of classified information.
Can a security infraction cost you your clearance?
A single infraction usually results in counseling or retraining rather than clearance action. However, a pattern of repeated infractions signals carelessness with classified information and is an adjudicative concern that can contribute to suspension or revocation of a clearance.
Who investigates security violations in the DoD?
The organization's security manager or servicing security office conducts the inquiry and investigation. Serious cases involving confirmed compromise, espionage, or criminal conduct may be referred to counterintelligence elements or law enforcement such as the relevant military criminal investigative organization.