BIRCH, Circuit Judge:
The issue in this appeal is whether the discretionary function exception to the Federal Tort Claims Act (“FTCA”) shields the United States Government from liability for the allegedly negligent failure of an assistant United States attorney (“AUSA”) to: (1) provide a victim or witness with protection after her life was threatened by a suspected offender; (2) inform the victim or witness of available remedies against intimidation and harassment; and (3) inform other components of the Justice Department, such as the U.S. Marshals Service, of the threat. The district court held that it lacked subject matter jurisdiction over this case because the allegedly negligent actions (and inaction) of the AUSA involve discretionary decisions. We hold that the AUSA’s decisions with respect to providing protection to a victim and informing other components of the Justice Department fall within the discretionary function exception. Because we conclude, however, that the discretionary function exception does not bar a cause of action based on the alleged negligent failure of the AUSA to inform the victim of available remedies against intimidation and harassment, we reverse the district court’s dismissal and remand for further proceedings.
I. BACKGROUND
In July 1991, plaintiff Michelle Ochran contacted an agent of “CLEAN” (Combined Law Enforcement Against Narcotics), a non-federal anti-drug task force, and reported that her ex-boyfriend, Frank Restaino, was involved in drug-trafficking activity. The agent encouraged Ochran to remain in contact with Restaino while the task force gathered further evidence for his prosecution. The investigation in which Ochran cooperated eventually led to Restaino’s arrest and prosecution on federal drug charges. Assistant U.S. Attorney Susan Daltuva (“AUSA Daltuva” or “Daltuva”) was assigned to prosecute Restaino.
On September 19, 1991, the night before Restaino’s arraignment, Restaino called Ochran at her father’s home (where she lived) and threatened to kill her and her family because she had informed on him. Ochran called the CLEAN agent with whom she had dealt during their investigation of Restaino and reported the threat. The agent advised Ochran that she should contact AUSA Daltuva, who was now in charge of prosecuting Restaino, and gave Ochran Dal-tuva’s telephone number. The next morning, Ochran’s father called Daltuva on his daughter’s behalf and reported Restaino’s threats. Daltuva responded: “I’ll take care of it. I’ll have somebody get back to you, [don’t] worry about it.” Paul Ochran’s Dep. at 28, Supp. R-exh. B.
After inquiring about Restaino from Drug Enforcement Administration (“DEA”) agents that had dealt with him previously, AUSA Daltuva confronted Restaino and his attorney before the rearraignment hearing. Daltuva described herself “in fury,” as she “scared them both [and] ... read them the riot act.” Daltuva Dep. at 30-31, Supp. R-exh. E. In short, Daltuva told Restaino and his attorney that the threat to Ochran was unacceptable if Restaino was to remain out on bond. Daltu-[499]*499va received Restaino’s assurances that it would not happen again. Daltuva then decided not to request that Restaino’s bond be revoked and did not mention the threat to Ochran during the rearraignment hearing. Although it is not clear from the record who initiated contact following Restaino’s arraignment, the parties agree that Daltuva later reported back to Ochran’s father that she had warned Restaino not to repeat the threats and that his bond would be revoked if it happened again.
On October 22, 1991, while Restaino was out on bond, he kidnaped Ochran at knife-point from her mother’s driveway, drove her to a remote area, and choked her and stabbed her repeatedly. He then covered her body with bushes and left her for dead. Fortunately, Ochran managed to survive and found help. She was hospitalized for the stab wounds, a punctured lung, and skin abrasions.
After exhausting her administrative remedies, Ochran filed this action for damages under the FTCA, 28 U.S.C. § 1346(b), alleging that the U.S. Attorney’s office negligently failed to protect her from Restaino. The Government filed a motion to dismiss or, in the alternative, for summary judgment on the basis that the discretionary function exception, 28 U.S.C. § 2680(a), bars recovery. Ochran argued that the exception does not apply to this case because AUSA Daltuva failed to discharge mandatory duties owed to Ochran under the Attorney General Guidelines for Victim and Witness Assistance (1991) and because a special relationship arose between Ochran and Daltuva. The district court concluded that the discretionary function exception deprived it of subject matter jurisdiction and granted the Government’s motion. This appeal followed.
II. DISCUSSION
We review de novo the district court’s dismissal of the action for lack of subject matter jurisdiction as well as its interpretation and application of the statutory provisions. Sims v. Trus Joist MacMillan, 22 F.3d 1059, 1060 (11th Cir.1994).
A. The Discretionary Function Exception
The FTCA waives the United States government’s sovereign immunity from suit in federal courts for the negligent actions of its employees. See 28 U.S.C. § 1346(b). This broad waiver of immunity, however, is subject to several exceptions. The discretionary function exception, at issue in this case, precludes government liability for “[a]ny claim based upon ... the exercise or performance or the failure to exercise or perform a discretionary function or duty on the part of a federal agency or an employee of the Government, whether or not the discretion involved be abused.” 28 U.S.C. § 2680(a).
The Supreme Court has enunciated a two-part test for determining whether a government employee’s action or omission falls within the discretionary function exception. See Autery v. United States, 992 F.2d 1523, 1526 (11th Cir.1993). First, we consider the nature of the conduct and determine whether it involves “an element of judgment or choice.” United States v. Gaubert, 499 U.S. 315, 322, 111 S.Ct. 1267, 1273, 113 L.Ed.2d 335 (1991) (quoting Berkovitz v. United States, 486 U.S. 531, 536, 108 S.Ct. 1954, 1958, 100 L.Ed.2d 531 (1988)); Powers v. United States, 996 F.2d 1121, 1124 (11th Cir.1993). Government conduct does not involve an element of judgment or choice, and thus is not discretionary, if “a ‘federal statute, regulation, or policy specifically prescribes a course of action for an employee to follow,’ because ‘the employee has no rightful option but to adhere to the directive.’ ” Gaubert, 499 U.S. at 322, 111 S.Ct. at 1273 (quoting Berkovitz, 486 U.S. at 536, 108 S.Ct. at 1958-59); see also Powers, 996 F.2d at 1124 (giving examples of cases in which the relevant statute or policy was found to prescribe a specific course of action).
Second, if the conduct at issue involves the exercise of judgment, we must determine whether that judgment is grounded in considerations of public policy. Gaubert, 499 U.S. at 322-23, 111 S.Ct. at 1273-74. “[T]he purpose of the exception is to ‘prevent judicial “second-guessing” of legislative and administrative decisions grounded in social, economic, and political policy through the medium of an action in tort.’ ” Id. at 323, [500]*500111 S.Ct. at 1273 (quoting United States v. S.A. Empresa de Viacao Aerea Bio Grandense (Varig Airlines), 467 U.S. 797, 814, 104 S.Ct. 2755, 2765, 81 L.Ed.2d 660 (1984)). Therefore, decisions that involve judgment grounded in these considerations fall within the exception. In making this determination, we do not focus on the subjective intent of the government employee or inquire whether the employee actually weighed social, economic, and political policy considerations before acting. Id. at 325, 111 S.Ct. at 1275; Autery, 992 F.2d at 1530-31. We “focus on the nature of the actions taken and on whether they are susceptible to policy analysis.” Gaubert, 499 U.S. at 325, 111 S.Ct. at 1275.
B. The Attorney General Guidelines
Ochran contends that the Attorney General Guidelines for Victim and Witness Assistance (1991) [hereinafter “Guidelines”] imposed on AUSA Daltuva a mandatory course of action. The relevant provisions of the Guidelines state:
Consistent with the provisions of 18 U.S.C. [§§ ] 3521-3528, the responsible official shall make the necessary and appropriate arrangements to enable victims and witnesses to receive reasonable protection against threat, harm and intimidation from a suspected offender and persons acting in concert with or at the behest of a suspected offender.
Moreover, information on the prohibition against intimidation and harassment and the remedies therefor shall routinely be made available to victims and witnesses. The responsible official shall, if warranted, advise the component of the Justice Department having the enforcement responsibilities, (e.g. the U.S. Marshals Service), of instances involving intimidation or harassment of any victim or witness.
Id. art. Ill, § D(2) (emphasis in original). Ochran emphasizes the use of the mandatory “shall” in these provisions — pointing out that “shall” is even italicized for emphasis in one of the provisions of the published Guidelines — and argues that the provisions imposed on Daltuva three specific duties that Daltuva negligently discharged or failed to discharge. The specific duties are (1) providing Ochran with protection, (2) informing Ochran of available remedies against intimidation and harassment by Restaino, and (3) advising enforcement components of the Justice Department [hereinafter the “U.S. Marshals Service”] of the threat Ochran received.1
The Government, on the other hand, contends that the use of the word “shall” is not dispositive because the Guidelines provisions at issue are laden with discretionary language. The Government emphasizes that the Guidelines require the AUSA to make the “necessary and appropriate” arrangements for the “reasonable” protection of victims and witnesses; that information on the prohibition against, and remedies for, intimidation and harassment “routinely” be made available; and that the U.S. Marshals Service be advised of a threat to a victim or witness, “if warranted.” See id. We agree with the Government that the use of the word “shall” in describing the responsibilities of the AUSA does not necessarily mean that the Guidelines left no room for the AUSA to exercise judgment or choice. See Powers, 996 F.2d at 1125. Even though the Guidelines require the AUSA to arrange for the reasonable protection of a victim who is threatened,' they did not specify how this protection is to be provided. Clearly, the [501]*501AUSA would have to exercise judgment to determine the appropriate means for providing protection. On its face, the provision dealing with advising the U.S. Marshals Service of a threat gives the AUSA the authority to decide whether such action is warranted. Finally, the Guidelines do not specify when information on the prohibition against intimidation and harassment of victims must be made available. We conclude that the provisions of the Guidelines cited by Oehran leave room for responsible officials to exercise choice or judgment in discharging their responsibilities. The question as to whether decisions pursuant to these provisions fall within the discretionary function exception turns therefore on whether the judgments involved are grounded in policy considerations.
Oehran argues that the judgments that the AUSA would have to make to implement the directives of the Guidelines are not grounded in considerations of public policy and that, in any case, Daltuva’s deposition shows that she in fact did not consider any social, economic, or political factors in making her decisions regarding Restaino’s threat. As we have already stated, however, it is not relevant whether the government employee in fact made a policy judgment in this ease. See Autery, 992 F.2d at 1530-31. The inquiry is whether the nature of the conduct at issue is “susceptible to policy analysis.” Gaubert, 499 U.S. at 325, 111 S.Ct. at 1275.
1. The Decision Not to Protect Oehran
We agree with the Government that the decision of the AUSA as to how to protect a victim that has been threatened by a suspected offender is susceptible to policy analysis. Generally, the AUSA would be expected to balance the victim’s need for protection in light of the severity and credibility of the threat, the allocation of limited government resources, and the government’s dealings with the suspected offender, such as a plea negotiation or cooperation of the suspected offender with law enforcement agencies. Other factors might be important, depending on the specific option for providing protection that the AUSA might consider. For example, in this case, Oehran contends that Daltuva should have considered Oehran for the Witness Security Program under the Witness Security Reform Act of 1984, 18 U.S.C. §§ 3521-3528; told the arraignment judge about the threat and asked that Res-taino’s bond be revoked; or sought a restraining or protective order against Restai-no under the provisions of the Victim and Witness Protection Act of 1982, 18 U.S. §§ 1512-1515. An examination of these options, however, illustrates the policy considerations that might be considered by the AUSA in determining the appropriate means of protecting a victim.
As the Fourth Circuit noted in Piechowicz v. United States, 885 F.2d 1207 (4th Cir.1989), the statutory provisions and Attorney General guidance for considering a witness for the Witness Security Program afford Justice Department personnel wide discretion, id. at 1212-13, and “require! ] [such personnel] to consider, among other criteria, the witness’s importance to the prosecution as an aspect of the decision, and to conclude that local authorities are unable to provide protection commensurate with the federal interest in the witness’s safety,” id. at 1213. These criteria, which are primarily related to the strength of the federal interest in ensuring the safety of a witness, are “freighted with policy overtones.” Id.; see Bergmann v. United States, 689 F.2d 789, 793 (8th Cir.1982) (“Determining whether protection of the witness is advantageous to the federal interest rather obviously calls for a policy decision of the discretionary nature.”).
Daltuva’s decisions not to seek revocation of Restaino’s bond or a restraining order against Restaino also implicate criteria grounded in public policy. At a general level, these decisions are within Daltuva’s prosecutorial discretion; this factor, standing alone, constitutes an important public policy consideration. Cf. Smith v. United States, 375 F.2d 243, 248 (5th Cir.1967) (stating that “prosecutorial discretion has long been recognized as sacrosanct”). More specifically, in deciding whether to revoke a suspect’s bond or seek certain orders against the suspect, an AUSA likely would balance the credibility of the threat to the victim against the prosecution’s interest in negotiating a plea [502]*502with the suspect or obtaining his cooperation.2
2. The Decision Not to Inform the U.S. Marshals Service of the Threat to Ochran
The AUSA’s decision not to notify the U.S. Marshals Service of the threat to Ochran implicates the policy considerations of allocating limited government resources for the protection of victims and witnesses. In reaching this conclusion, we recognize that because budgetary constraints are almost always important to government decisions, see Autery, 992 F.2d at 1530 (citing ARA Leisure Servs. v. United States, 831 F.2d 193, 196 (9th Cir.1987)), not “every choice [that implicates such constraints] is a policy judgment shielded from liability through the operation of the discretionary function exception.” Phillips v. United States, 956 F.2d 1071, 1075 (11th Cir.1992). The relevant inquiry in these cases is whether the government expects the employee who is making the choice in question to consider the policy implications of that choice. See id. (citing Gaubert, 499 U.S. at 335-36, 111 S.Ct. at 1280 (Sealia, J., concurring in part)). The fact that AUSAs are typically endowed with a high level of responsibility — and attendant discretion — in representing the Government as a prosecutor and civil litigant coupled with the absence of any specific guidance on how budgetary constraints should influence AUSAs’ decision-making suggests that the Attorney General has entrusted to the U.S. Attorneys and their AUSAs the responsibility of allocating the limited resources of the Justice Department. Accordingly, we con-elude that AUSA Daltuva’s decisions on how best (and whether) to protect Ochran, including whether to notify the U.S. Marshals Service of the threat to Ochran, are susceptible to policy analysis and, thus, fall within the discretionary function exception.
3. The Decision Not to Inform Ochran of Available Remedies Against Intimidation and Harassment
We do not reach the same conclusion regarding Daltuva’s decision not to inform Ochran of the remedies available against victim intimidation and harassment. Before we present our analysis of this issue, however, we deal with the dissent’s suggestion that we should not address this issue because it was presented for the first time on appeal. We recognize that “[gjenerally this court will not reach the merits of an issue not considered by the district court.” Baker v. Bell, 630 F.2d 1046, 1055 (5th Cir.1980) (emphasis added). This principle is a rule of practice, however, not a jurisdictional limitation. Dean Witter Reynolds, Inc. v. Fernandez, 741 F.2d 355, 360 (11th Cir.1984). “The decision whether to consider an argument first made on appeal ... is ‘left primarily to the discretion of the courts of appeals, to be exercised on the facts of individual cases.’ ” Roofing & Sheet Metal Serv. v. La Quinta Motor Inns, 689 F.2d 982, 989 (11th Cir.1982) [hereinafter Roofing ] (quoting Singleton v. Wulff, 428 U.S. 106, 121, 96 S.Ct. 2868, 2877, 49 L.Ed.2d 826 (1976)). The question in this case, therefore, is whether it is proper for us to exercise our discretion to consider Ochran’s “failure to inform” claim,3 even [503]*503though the district court did not address it. We believe that this case presents compelling circumstances for exercising our discretion.
At the outset, we note that the government did not argue on appeal that we should not address Ochran’s argument. Rather, the government met Ochran’s contentions head-on in its brief as well as oral argument. We do not believe it is incumbent upon us to make a waiver argument which the government was willing to forego. In other words, it may be that the government waived the waiver argument. To be sure, the doctrine that the dissent invokes is prudential in nature and can be raised by the court of appeals sua sponte. We are mindful, however, that one of the underpinnings of the rule is a “concern for avoiding prejudice to the parties.” Roofing, 689 F.2d at 990; see Hormel v. Helvering, 312 U.S. 552, 556, 61 S.Ct. 719, 721, 85 L.Ed. 1037 (1941) (The rule is “essential in order that litigants may not be surprised on appeal by final decision there of issues upon which they have had no opportunity to introduce evidence.”). There is no prejudice to the government in this case since it fully briefed all the issues that we address.
The second purpose of the rule is a concern for judicial economy. Roofing, 689 F.2d at 990. We have noted, however, that no great gains in judicial economy are achieved by refusing to consider purely legal arguments raised for the first time on appeal from a motion for summary judgment. Id.; cf. Macklin v. Singletary, 24 F.3d 1307, 1312 (11th Cir.1994) (opinion of Carnes, J., joined by Cox and Woods, JJ.) (“[W]ith issues subject to de novo review on appeal, our scope of review is at its broadest and our willingness to decide without the benefit of a district court ruling should increase commensurately.”). Indeed, we submit that remanding the case to the district court after full briefing and oral argument in which the parties heavily and primarily litigated section D(2) of article III of the Guidelines, and after we have expended a considerable amount of time — both before and after oral argument— parsing through that section of the Guidelines, would itself work a significant loss of judicial resources.
Moreover, we have previously recognized that there are exceptions to the general rule that we do not consider arguments first raised on appeal. See generally Dean Witter, 741 F.2d at 360-61 (listing exceptions). Among them, “‘a federal appellate court is justified in resolving an issue not passed on below ... where the proper resolution is beyond any doubt.’” Id. at 361 (quoting Singleton, 428 U.S. at 121, 96 S.Ct. at 2877). We believe that the issue that we address falls within this exception.
In short, although the general rule is that we do not address arguments that were not addressed by the district court, we unquestionably have the discretion to do so. Considering the particularly compelling circumstances of this case — involving, lest we forget, the near murder of a citizen, who voluntarily cooperated with the government to apprehend a drug trafficker, due to the negligence of an AUSA — and the failure of the government to argue that we should not address Ochran’s claim of failure to inform, we choose to exercise that discretion. We are justified in doing so where, as here, “the interest of substantial justice is at stake.” Id. (internal quotations omitted).
[504]*504We turn therefore to the government’s claim that Daltuva’s decision not to inform Ochran of the remedies available against victim intimidation and harassment, including the availability of protective orders, falls within the discretionary function exception. According to the Government, such a decision involves a judgment as to when to inform the victim of these remedies. As we have already stated, we agree with that assessment. The Government has not advanced, however, any policy considerations that might influence the judgment of when to give the victim or witness the relevant information. Nor can we discern any such policy considerations.4 We find unconvincing the Government’s general assertion that the decision to inform a victim of available remedies against intimidation and harassment is inextricably linked to the decision of how to protect the victim. The Guidelines list the duty to inform in addition to, not merely as a part of, the general duty to provide reasonable protection to the victim. That the latter duty involves the consideration of public policy matters has no bearing on whether the former also involves the same considerations.5 Cf. Berkovitz, 486 U.S. at 542-45, 108 S.Ct. at 1962-63 (analyzing each provision of the relevant regulations as the source of a separate government duty). Because we conclude that the duty to inform does not involve considerations of public policy, we hold that the discretionary function exception does not bar a cause of action based on Oehran’s allegation that Daltuva negligently failed to discharge her duty to inform Ochran of available remedies against intimidation and harassment.6
[505]*505C. Special Relationship
Ochran argues further that the discretionary function exception does not bar a cause of action alleging negligent failure to protect because AUSA Daltuva voluntarily assumed the duty to protect Ochran, thereby inducing Ochran’s reliance. See, e.g., Miller v. United States, 530 F.Supp. 611, 615 (E.D.Pa.1982) (“[CJourts have ... recognized that, where the government enters into a special relationship with an individual, the government may not have any discretion as to whether to protect that individual.... [T]he negligent performance of that duty [to protect] is not shielded by the discretionary function exception.”) (footnote omitted); Merced v. City of New York, 856 F.Supp. 826, 831 (S.D.N.Y.1994) (“The Government admits that it ‘may have a legal duty to protect’ if it ‘voluntarily assumed or incurred that duty to a specific individual ....’”) (quoting Piechowicz v. United States, 685 F.Supp. 486, 498 (D.Md.1988), aff'd, 885 F.2d 1207 (4th Cir.1989)). According to Ochran, once Daltuva undertook to protect Ochran, she entered into a special relationship with Ochran and bound herself to discharge the duty with due care. See, e.g., Everton v. Willard, 468 So.2d 936, 938 (Fla.1985); State, Office of State Attorney v. Powell, 586 So.2d 1180, 1183 (Fla.Dist.Ct.App.1991).
The Government counters that two requirements must be satisfied for the district court to have jurisdiction in an FTCA claim: (1) there must be a state-law duty and (2) the discretionary function exception must not apply. According to the Government, the special relationship theory of liability only serves to create a state-law duty to the plaintiff, thus satisfying one of the two FTCA requirements; if the discharge of this state-law duty involves judgments grounded in considerations of public policy, the discretionary function exception bars suit against the United States. We agree.
Perhaps the strongest support for Ochran’s position comes from the Supreme Court’s decision in Indian Towing Co. v. United States, 350 U.S. 61, 76 S.Ct. 122, 100 L.Ed. 48 (1955). The plaintiff in Indian Towing sued the United States for the alleged negligence of the Coast Guard in maintaining a lighthouse. The government argued that the language of 28 U.S.C. § 2674 (imposing liability “in the same manner and to the same extent as a private individual under like circumstances”), in conjunction with § 2680 (the discretionary function exception), meant that the government cannot be held liable for “uniquely governmental functions.” Indian Towing, 350 U.S. at 64, 76 S.Ct. at 124. In rejecting this argument, the Court held that the FTCA allowed liability because the government affirmatively undertook to warn the public and “it is horn-book tort law that one who undertakes to warn the public of danger and thereby induces reliance must perform his ‘good Samaritan’ task in a careful manner.” Id. at 64-65, 76 S.Ct. at 124. Justice Frankfurter went on to explain:
The Coast Guard need not undertake the lighthouse service. But once it exercised its discretion to operate a light on Chandeleur Island and engendered reliance on the guidance afforded by the light, it was obligated to use due care to make certain the light was kept in good working order.... If the Coast Guard failed in its duty and damage was thereby caused to petitioners, the United States is liable under the Tort Claims Act.
Id. at 69, 76 S.Ct. at 126-27. Ochran’s contention is based on similar reasoning: AUSA Daltuva exercised her discretion whether to protect Ochran when she promised and undertook to protect Ochran, thereby engendering reliance; the Government is therefore liable for Daltuva’s negligent discharge of this undertaking. This interpretation of Indian Towing, however, has been severely undercut, if not altogether disavowed, by the Supreme Court in Gaubert.
Before Gaubert, federal courts had generally interpreted Indian Towing and other Supreme Court precedent as drawing a distinction between governmental decisions at the planning or policy making level and those at the operational or policy application level. See, e.g., Gaubert, 499 U.S. at 321, 111 S.Ct. at 1272-73 (explaining that the court of [506]*506appeals in Gaubert adopted the planning/operational distinction on the basis of Indian Towing, Varig Airlines, and Berkovitz); Alabama Elec. Coop. v. United States, 769 F.2d 1523, 1527 (11th Cir.1985) (arguing that “Varig Airlines supports the planning/operational distinction developed by the lower courts”). The discretionary function exception was said to cover decisions at the planning level, but not at the operational level. See Gaubert, 499 U.S. at 321, 111 S.Ct. at 1272-73 (explaining the rationale of the court of appeals). The Supreme Court unequivocally rejected this distinction in Gaubert, explaining that “[t]he United States was held liable [in Indian Towing], not because the negligence occurred at the operational level but because making sure the light was operational ‘did not involve any permissible exercise of policy judgment.’” Id. at 326, 111 S.Ct. at 1275 (quoting Berkovitz, 486 U.S. at 538 n. 3, 108 S.Ct. at 1959 n. 3).
Therefore, Indian Towing, as interpreted by the Gaubert Court, involved discretion grounded in public policy considerations only at one level: whether the Coast Guard would undertake to operate the lighthouse. Significantly, the judgments involved in deciding how to operate the lighthouse were not grounded in public policy consideration. By contrast, as we have explained in part II.B of this opinion, the nature of the conduct at issue here is such that it involves discretion grounded in public policy considerations in deciding both whether and how to protect a victim. Thus, under Gaubert, even though AUSA Daltuva may have voluntarily assumed the duty of protecting Ochran, her alleged negligence in discharging that duty is not actionable under the FTCA because deciding how to protect Ochran involves the “exercise of policy judgment.”7 Id.
III. CONCLUSION
A citizen who voluntarily cooperated with the government to apprehend a drug trafficker was almost murdered as a direct result of her cooperation. She fortunately survived, and now brings an FTCA action against the United States alleging that the assistant U.S. Attorney (“AUSA”) in charge of the ease failed to protect her after being made aware of death threats against her. The district court concluded that the discretionary function exception deprived it of subject matter jurisdiction and dismissed the case. We hold that the AUSA’s decisions on how to provide protection to a victim and whether to inform other components of the Justice Department of a threat to a victim fall within the discretionary function exception. Because we conclude, however, that the discretionary function exception does not bar a cause of action based on the alleged negligent failure of the AUSA to inform the victim of available remedies against intimidation and harassment, we REVERSE the district court’s dismissal and REMAND for further proceedings consistent with this opinion.