Which measures protect confidential information within SOPs?

• A. Public sharing among all employees.
• B. Printing copies for offsite storage only.
• C. Access controls, data minimization, encryption, non-disclosure agreements, and secure handling.
• D. Using simple passwords.

Answer: (C)

Protecting confidential information in SOPs relies on layered safeguards that control who can access data, minimize the data stored, protect data in storage and transit, and establish formal duties for handling information. Access controls ensure only authorized personnel can view or change the information. Data minimization reduces risk by keeping only what is necessary, so there’s less to protect. Encryption protects data so that even if someone gains access, the information remains unread. Non-disclosure agreements formalize obligations and consequences for sharing confidential material. Secure handling covers practical steps like secure transmission, proper device and media security, and correct disposal of information.

Choices that involve public sharing among all employees undermine confidentiality from the start, and printing copies for offsite storage focuses on a physical form that can be lost or exposed; neither approach provides the comprehensive protections needed. Using simple passwords is easily compromised and does not meet robust authentication standards, leaving information vulnerable. Together, the measures listed offer a complete, practical approach to keeping confidential information within SOPs secure.