How should SCI attachments in email be handled?

• A. Attachments should be sent through secure channels or encrypted; ensure recipients have need-to-know and clearance.
• B. Attachments should be sent via plain email.
• C. Attachments are not allowed.
• D. Attachments can be sent to unrelated parties.

Answer: (A)

Protecting SCI attachments hinges on secure transmission and strict access controls. Since these materials are highly sensitive, they should be sent only through secure channels or with encryption so that only the intended recipient can read them. The recipient must have the appropriate need-to-know and clearance, ensuring access is limited to those who are authorized. This prevents interception or accidental exposure that can occur with plain email. Alternatives that rely on plain email, or that allow sharing with unauthorized or unrelated parties, would undermine confidentiality and violate safeguarding requirements.