You identify an unknown login to your EDE partner site, and you believe that someone has gained unauthorized access to your EDE account. To which agency or party should you report this privacy incident?

You identify an unknown login to your EDE partner site, and you believe that someone has gained unauthorized access to your EDE account. To which agency or party should you report this privacy incident?

• A. The CMS IT Service Desk
• B. The EDE partner's Agent Broker Help Desk
• C. The Marketplace Call Center
• D. The Open Enrollment Hotline

Answer: (A)

When a privacy or security incident involving CMS systems like the EDE partner site is suspected, the correct action is to report it to the CMS IT Service Desk. This team handles security incidents across CMS platforms, coordinates with the Security Incident Response Team, and takes the necessary steps to contain, investigate, and document the incident per policy. They’re equipped to initiate the formal incident workflow and notifications. The other options are routine support or enrollment help channels and aren’t equipped to manage privacy/security incidents—they’re intended for general account assistance or enrollment questions rather than incident response.

When a privacy or security incident involving CMS systems like the EDE partner site is suspected, the correct action is to report it to the CMS IT Service Desk. This team handles security incidents across CMS platforms, coordinates with the Security Incident Response Team, and takes the necessary steps to contain, investigate, and document the incident per policy. They’re equipped to initiate the formal incident workflow and notifications. The other options are routine support or enrollment help channels and aren’t equipped to manage privacy/security incidents—they’re intended for general account assistance or enrollment questions rather than incident response.