Which approach best protects confidential information?

• A. Copy to personal devices.
• B. Share widely to foster collaboration.
• C. Leave unsecured and unlogged.
• D. Apply need-to-know access, store securely, minimize copies, log access, dispose securely.

Answer: (D)

Protecting confidential information hinges on restricting who can view it, where it’s kept, and how it’s handled throughout its life. The best approach combines several safeguards: need-to-know access, secure storage, minimized copies, logging of access, and secure disposal.

Need-to-know access enforces the principle of least privilege—only people whose roles require the information get it. Storing securely—using strong controls and encryption where appropriate—keeps data protected at rest and makes unauthorized access harder. Minimizing copies reduces the number of places the data exists, lowering the chance of exposure. Logging access provides a traceable record so suspicious activity can be detected and investigated. Secure disposal ensures that when data is no longer needed, it cannot be recovered.

The other options introduce clear risk: copying to personal devices creates uncontrolled entry points; sharing widely increases who can access the information; leaving data unsecured and unlogged provides no protection or accountability.