SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

What should Rudy have done before sending the sensitive work report?

1. Sent it to himself first

2. Double check the TO address

3. Ask for confirmation from his boss

4. Check the attachment size

The correct answer is: Double check the TO address

Double checking the "TO" address is a crucial step before sending a sensitive work report because it ensures that the information is sent to the intended recipient. Mistakes in addressing emails can lead to unauthorized individuals receiving confidential data, which can cause security breaches and privacy violations. Confirming that the email is addressed correctly protects sensitive information and helps maintain compliance with organizational policies regarding data confidentiality. Sending the report to himself first could help him ensure the content is correct, but it does not directly address the risk of sending it to the wrong person. Asking for confirmation from his boss could be useful but may delay the communication unnecessarily. Checking the attachment size, while important for ensuring the email can be sent, does not mitigate the risk of the email being sent to the wrong recipient. Thus, verifying the "TO" address stands out as the most effective way to protect sensitive information in this scenario.