CramX Logo

In order to obtain access to CUI, an individual must first have: (Select the best answer) A. A lawful government purpose B. Approval from their security manager C. A Need-to-Know D. Approval from their supervisor
12 months agoReport content

Answer

Full Solution Locked

Sign in to view the complete step-by-step solution and unlock all study resources.

Step 1:
I'll solve this problem step by step, focusing on the key concept of Need-to-Know in information security access protocols.

Step 2:
: Understand the Context

The question is about Controlled Unclassified Information (CUI) access requirements. This involves determining the primary prerequisite for accessing sensitive information.

Step 3:
: Analyze the Options

Let's examine each option carefully: A. A lawful government purpose - This is broad but not specific enough B. Approval from their security manager - This is a procedural step C. A Need-to-Know - This is a critical security principle D. Approval from their supervisor - This is administrative but not a security requirement

Step 4:
: Define Need-to-Know Principle

Need-to-Know is a fundamental information security concept that means: - An individual must have a legitimate reason to access specific information - Access is restricted only to information directly relevant to their job function - Prevents unnecessary exposure of sensitive information

Step 5:
: Evaluate the Correct Answer

Option C (Need-to-Know) is the most precise and fundamental requirement for accessing CUI. It ensures that: - Only personnel with a specific, job-related reason can access the information - Minimizes potential security risks - Protects sensitive information from unauthorized disclosure

Final Answer

A Need-to-Know The Need-to-Know principle is the primary and most critical requirement for accessing Controlled Unclassified Information (CUI), ensuring that sensitive information is only shared with those who have a legitimate, specific reason to access it.