How should confidential information be handled?

• A. Access only what is needed; store securely; share only with authorized personnel; follow data classification rules.
• B. Share with everyone for transparency.
• C. Store in unsecured shared drive.
• D. Print copies and leave on desk.

Answer: (A)

Protecting confidential information relies on restricting access to those who need it, keeping data in secure storage, sharing only with authorized personnel, and following established data classification rules. This approach embodies the idea of least privilege: people get access only to what they need to perform their job, which reduces the chance of accidental or intentional disclosure. Keeping information in secure storage with proper controls prevents unauthorized viewing or tampering, and sharing only with authorized individuals ensures it reaches those who are trained and permitted to handle it. Data classification rules provide clear guidance on how different kinds of information should be protected, stored, and transmitted, so policies are applied consistently.

Sharing with everyone undermines confidentiality and can breach privacy and policy requirements. An unsecured shared drive makes data accessible to anyone who can reach that drive, increasing the risk of exposure. Printing and leaving copies on a desk creates physical risk of loss or theft and bypasses the protections that digital controls provide.