How should SCI data be protected in transit and at rest?

• A. In transit via approved secure channels; at rest via encryption and controlled access for digital data; paper kept secure in locked storage.
• B. In transit via public channels; at rest unencrypted; papers left on desk.
• C. In transit via email; at rest with no encryption.
• D. Only hardcopy; no digital data.

Answer: (A)

Protecting SCI data requires securing both how data moves and where it’s stored. In transit, SCI information must travel over approved secure channels to prevent interception, eavesdropping, or tampering. At rest, digital SCI data should be encrypted and access to it tightly controlled so only authorized personnel can view it. Physical SCI papers need to be kept in locked, secure storage to prevent unauthorized access. This combination—secure transmission, encryption with controlled access for stored digital data, and secure storage for paper—provides protection for both confidentiality during movement and secrecy of stored information. The other options rely on insecure practices such as using public channels, leaving data unencrypted, or leaving papers unattended, which do not meet SCI protection requirements.