“The CDIRT's mission is to prevent a material loss of profits, public confidence, or information assets by providing an immediate, effective, and skillful response to any unexpected event in which there is an unauthorized release or access of sensitive information.”