Free practice · single-choice · medium

Practice

Respond to a misdirected file

An employee notices that a confidential staff file was sent to the wrong external address. What should happen first?

Secure information lifecycle

Classification guides every later data-handling decision

  1. ClassifyIdentify sensitivity and policy
  2. MinimizeUse only what the purpose requires
  3. ProtectChoose approved storage and encryption
  4. ShareName recipients, access, and expiration
  5. RetainFollow the approved lifecycle
  6. RespondReport exposure without delay

Purpose, minimum necessary data, approved storage, specific recipients, retention, and incident reporting keep protection attached to the information.

Choose one answer