SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

Which action should you avoid when handling sensitive data?

1. Logging off after use

2. Sharing passwords with colleagues

3. Encrypting sensitive files

4. Using secure channels for transmission

The correct answer is: Sharing passwords with colleagues

Sharing passwords with colleagues is an action that should be avoided when handling sensitive data because it significantly increases the risk of unauthorized access. When passwords are shared, the control over who can access sensitive information becomes diluted, creating opportunities for potential breaches. Each individual should maintain their own credentials to ensure accountability and security. Additionally, when sensitive data is involved, the integrity and confidentiality of that data must be prioritized. By sharing passwords, there is a higher likelihood of them falling into the wrong hands, leading to data leaks or compromises. In contrast, actions like logging off after use, encrypting sensitive files, and using secure channels for transmission contribute positively to data security. They help ensure that sensitive information remains protected and can only be accessed by authorized individuals in a secure manner.