CLICK HERE FOR THE MANAGEMENT ALERT REPORT Even so, the alert noted, the 18F users waited five days to report the situation, which itself was another breach of info-security policy -- which says that one hour is the top limit for delay.