How should paperless SCI data be managed?

• A. Print and store in a file
• B. Disable backups
• C. Store on unsecured shared drive
• D. Use secure systems with access controls, encryption, and documented procedures; ensure backups are protected

Answer: (D)

Protecting paperless SCI data means enforcing a secure, auditable environment that keeps confidentiality, integrity, and availability intact. Use secure systems with strict access controls so only authorized individuals can view or modify the data, and encrypt data both when it’s stored and while it’s being transmitted to prevent any unauthorized disclosure if devices are lost or networks are compromised. Having documented procedures ensures consistent data handling, storage, retention, incident response, and ongoing operations like backups. Backups themselves must be protected the same way as the live data—encrypted, access-controlled, tested regularly, and integrated into the recovery processes so data can be restored reliably after any incident.

Without these safeguards, printing and keeping physical copies undermines the paperless approach and introduces physical security risks; turning off backups removes essential resilience and recovery capability; and storing data on an unsecured shared drive leaves it exposed to unauthorized access and lacks proper controls and encryption.