What is the general rule for handling sensitive information in daily operations?

• A. Sensitive information should be safeguarded, minimized, and shared only on a need-to-know basis.
• B. Sensitive information should be stored in public folders
• C. Sensitive information should be shared with all teammates
• D. Sensitive information should never be encrypted

Answer: (A)

Sensitive information in daily operations should be safeguarded, minimized, and shared only on a need-to-know basis. This approach protects confidentiality by giving access only to those who truly need it to perform their duties, reducing the risk of exposure. It also aligns with data minimization—collecting and retaining only what is necessary—and with robust controls like encryption, secure storage, and strict access management. In practice, this means implementing role-based or least-privilege access, using encryption for data at rest and in transit, and regularly reviewing who can see or modify sensitive information. Sharing data publicly or with everyone defeats confidentiality and creates unnecessary risk, while not encrypting data leaves it vulnerable if devices are lost or intercepted. Limiting access to authorized individuals keeps information safer and helps maintain a strong security posture.