Which arrangement best maintains SCI security for use and storage?

• A. In a standard office workstation connected to the internet
• B. On personal devices outside secure locations
• C. On shared drives with broad access
• D. On approved devices in secure locations

Answer: (D)

Handling SCI requires restricting use and storage to devices that are explicitly approved for SCI work and kept within secure locations. Using approved devices in a secure location ensures that the hardware, software configurations, encryption, access controls, and monitoring are all part of a controlled environment. It also places the data behind physical security and network protections, making it much harder for unauthorized individuals to access, modify, or exfiltrate the information.

The other setups fail because they introduce uncontrolled access and exposure: an internet-connected standard workstation lacks the necessary safeguards and monitoring; personal devices outside secure locations bypass organizational controls, updates, and encryption; and shared drives with broad access lift the need-to-know barrier, increasing the risk of accidental or malicious disclosure. In short, the safest arrangement for use and storage of SCI is on approved devices located in secure locations.