Why is confidentiality important in security roles and what practices support it?

• A. Increases information sharing; keep all records accessible.
• B. Prevents information misuse; use need-to-know access, secure storage, and compliant data handling.
• C. Not necessary; security staff can disclose as needed.
• D. Reduces security risk by allowing public access.

Answer: (B)

Confidentiality in security roles is about preventing unauthorized disclosure of sensitive information. When access is limited to what a person truly needs to perform their job, the likelihood of accidental or malicious data leakage decreases. Practicing need-to-know access means granting permissions strictly to those who must see specific data and removing them when no longer required. Secure storage covers both physical and digital safeguards—like locked facilities, encryption, strong access controls, and audit trails—to keep information protected from unauthorized eyes. Compliant data handling involves following relevant laws and policies for classifying, storing, using, retaining, and disposing of data, as well as having clear incident response and breach notification procedures. Put together, these practices minimize the chances of misuse, protect privacy, and help maintain trust and regulatory compliance. Options that suggest broader sharing, unnecessary disclosure, or public access run counter to confidentiality because they significantly raise the risk of leaks and misuse.