What are proper practices for handling sensitive or restricted information in electronic devices and files?

• A. Use encryption, access controls, minimize sharing, and secure disposal or decommissioning of data.
• B. Post all data publicly to improve transparency.
• C. Share with everyone who asks.
• D. Keep passwords on sticky notes.

Answer: (A)

Handling sensitive information in electronic devices and files relies on layered protections that guard confidentiality and reduce risk throughout the data lifecycle. Encryption protects data at rest and in transit, so information remains unreadable if a device is lost or stolen. Access controls ensure only authorized personnel can open or modify data, aligning with least-privilege principles. Minimizing sharing limits exposure to fewer people, and secure disposal or decommissioning sanitizes media so data cannot be recovered when devices are retired. Together these practices form a solid approach to keeping sensitive information safe. Public posting, broad sharing, or insecure practices like leaving passwords on sticky notes would defeat confidentiality and increase risk, which is why this combination is the best approach.