Spills are deliberate unauthorized disclosures of classified information to the media whereas leaks are accidental or intentional unauthorized disclosures of classified information across computer systems.

• A. True
• B. False
• C. Spills are accidental; Leaks are deliberate
• D. Both are never reported

Answer: (B)

Spills happen when classified information ends up in an environment or on a system that isn’t cleared for it—an accidental exposure to a lower classification or to an unapproved medium. It’s about where the information is stored or processed, not specifically about where the recipient is or whether the disclosure was intentional. Leaks, on the other hand, involve an unauthorized disclosure to someone who should not have access, often outside the organization, such as to the media or external parties. The crucial distinction is audience versus environment: spills move information into an inappropriate environment, while leaks expose information to an unauthorized audience.

So the statement isn’t correct because spills are not defined as deliberate disclosures to the media, and leaks aren’t strictly defined as disclosures across computer systems; leaks typically refer to unauthorized disclosures to outside recipients, which can be intentional or negligent, whereas spills are about the improper environment.