Which of the following best describes the proper handling of confidential information disclosures?

• A. Released only to those with a need to know and documented
• B. Not disclosed at all
• C. Released to media personnel
• D. Released to private security

Answer: (A)

Sharing confidential information should be limited to individuals who have a legitimate need to know, and every disclosure should be documented. This approach creates clear access boundaries and an audit trail, protecting sensitive data while still enabling necessary operations. Not disclosing at all would hinder essential activities; releasing information to media clearly breaches confidentiality; releasing to private security may be allowed only if they have a documented need to know, but the strongest, most accurate description is the need-to-know with documentation.