Question

which of the following is the correct best practice regarding the use of personal laptops, devices, and/or email accounts to handle sensitive information?

you may use personal laptops, devices, and/or email accounts to handle sensitive information as long as you have enabled two - factor authentication.

do not copy or store any sensitive or confidential data in an unauthorized system or account, such as your personal laptop or personal email account.

always create backups of sensitive information you are working with in each of your personal devices and accounts so you have consistent access if one copy is lost.

submit answer finish quiz

Explanation:

To determine the correct best practice for handling sensitive information with personal devices/accounts:

• The first option is incorrect because even with two - factor authentication, personal devices/accounts are not secure enough for sensitive info as they may lack organizational security protocols.
• The second option is correct. Sensitive data should not be stored in unauthorized systems (like personal laptops/email) as these systems don't have the necessary security measures (e.g., encryption, access controls) that authorized systems have.
• The third option is incorrect. Backing up sensitive info on personal devices/accounts increases the risk of data breach as personal systems are less secure.

Answer:

B. Do not copy or store any sensitive or confidential data in an unauthorized system or account, such as your personal laptop or personal email account.