Which practice supports maintaining secure handling of sensitive information?

• A. Implementing access controls, need-to-know, secure handling, and proper disposal
• B. Sharing credentials freely
• C. Leaving devices unlocked
• D. Storing data publicly

Answer: (C)

Maintaining secure handling of sensitive information rests on limiting who can access data and how it’s used, stored, and disposed of. Implementing access controls sets clear boundaries so only authorized individuals can reach the information, and often only in ways appropriate to their role. The need-to-know principle tightens this further by granting access strictly to those who have a legitimate, job-related reason to see it. Secure handling encompasses the habits and technologies that keep data safe in everyday operations—using approved devices, strong authentication, encryption where suitable, and careful practices to prevent leaks. Proper disposal completes the cycle by destroying data so it can’t be recovered once it’s no longer needed.

Other practices undermine security. Sharing credentials removes the safeguards that protect access controls; leaving devices unlocked allows others to view or misuse information without authorization; storing data publicly makes it accessible to anyone, defeating confidentiality.