How should non-authorized personnel access Week 1 materials be prevented?

• A. By access controls, permissions, and secure storage.
• B. Distributing copies to all teams.
• C. Posting publicly on intranet.
• D. Relying on passive security measures only.

Answer: (A)

Controlling who can view Week 1 materials hinges on enforcing access controls and safeguarding data through proper authorization. Before anyone accesses the materials, they should be authenticated and then authorized based on their role and need to know. Implementing access controls, permissions, and secure storage ensures only designated personnel can reach the content, and it helps prevent accidental or intentional leakage. This can include role-based access, least-privilege principles, encrypted repositories, and audit logs to track who accessed what and when.

Distributing copies to all teams spreads the risk and makes it easier for someone who doesn’t need the material to gain access, increasing the chance of loss or misuse. Publishing the materials publicly on the intranet removes confidentiality and could expose sensitive information to anyone with intranet access, including non-authorized personnel. Relying on passive security measures only means there are no active restrictions, no enforcement of who can view the files, and no monitoring to detect or respond to breaches. Together, these weaknesses highlight why explicit access controls, permissions, and secure storage are the correct approach.