Which practices illustrate proper handling of confidential information?

• A. Apply need-to-know access, store securely, minimize copies, log access, and dispose securely.
• B. Share with all team members.
• C. Store in a public cloud without protection.
• D. Keep in a locked drawer with no access log.

Answer: (A)

Handling confidential information properly requires access controls, secure storage, minimal copies, auditable logs, and secure disposal. Use the principle of least privilege by granting access only to people who need it for their role. Store data in secure locations or encrypted systems so unauthorized individuals cannot retrieve it. Limit the number of copies to reduce exposure. Keep a log of who accesses the information to maintain accountability and detect unusual activity. When data is no longer needed, dispose of it securely so it cannot be recovered. The described approach covers all stages of the data lifecycle and adheres to confidentiality requirements.

Sharing with everyone ignores need-to-know and greatly increases risk. Storing in a public cloud without protections leaves data exposed to unauthorized access. Keeping information in a locked drawer with no access log adds physical security but lacks traceability and may not address digital copies or disposal.