What if you copied a lot of documents to a USB flash drive for working offline and now you can’t find the drive? Do you have to report this potential breach to firm management or notify the client of this potential breach? Suppose a hacker has gotten into your laptop and perhaps downloaded some files?