How should sensitive information be stored and protected?

• A. Public sharing with no controls.
• B. Personal devices for storage without policies.
• C. Share with partners to ensure transparency.
• D. Secure storage with access controls, encryption where digital, and compliance with privacy policies.

Answer: (D)

Protecting sensitive information hinges on secure storage, strict access controls, encryption for digital data, and adherence to privacy policies. The best approach is to store information in a secure environment, grant access only to those who need it, use encryption to protect data at rest and, where applicable, in transit, and follow established privacy policies that govern how data is collected, used, retained, and disposed of. This combination reduces the risk of unauthorized access, data breaches, and misuse.

The other approaches fall short because they relax essential protections: sharing without controls can expose confidential data; relying on personal devices without formal policies introduces risk from loss, theft, and inconsistent security; and sharing with partners without proper consent or policy oversight can violate privacy requirements and undermine confidentiality.