Which measures are recommended when transmitting SCI data electronically to ensure only authorized recipients can access it?

• A. Send the file unencrypted to the recipient's email.
• B. Share via public cloud with broad access.
• C. Use password protection without encryption.
• D. Include encryption and access controls to ensure only authorized recipients can access.

Answer: (D)

When transmitting SCI data, protect confidentiality through encryption and strict access controls. Encryption guards the content so that even if the transmission is intercepted or the recipient’s device is compromised, the information remains unread without the proper key. Access controls enforce who is allowed to decrypt and view the data, aligning with the need-to-know principle and ensuring only authenticated, authorized recipients can access it. Relying on unencrypted transmission, broad public-cloud sharing, or password protection without encryption leaves SCI data exposed or inadequately protected. The recommended approach combines strong encryption with robust access management, supported by proper key handling, recipient authentication, and auditability, to ensure only authorized recipients can access the information.