Custodians are responsible for verifying a person's need to know and access before providing that individual with any classified information.

Custodians are responsible for verifying a person's need to know and access before providing that individual with any classified information.

• A. False
• B. Not specified
• C. True
• D. Depends

Answer: (C)

The main idea is the need-to-know principle and the custodian’s enforcement role. In handling classified information, access isn’t granted merely because someone has a general clearance; each request must be tied to a legitimate need to know for that specific information. Custodians are the ones who protect the data and actually enforce access controls. Before releasing any classified material, they verify who is requesting it, what clearance they hold, and why they need it to do their job. If the requester lacks a demonstrated need-to-know for that item, access is not provided. This approach embodies least privilege: people get access only to what they truly need to perform their duties. So the statement is true. Options suggesting it’s false or not specified don’t align with how need-to-know is typically applied in protecting classified information.

The main idea is the need-to-know principle and the custodian’s enforcement role. In handling classified information, access isn’t granted merely because someone has a general clearance; each request must be tied to a legitimate need to know for that specific information. Custodians are the ones who protect the data and actually enforce access controls. Before releasing any classified material, they verify who is requesting it, what clearance they hold, and why they need it to do their job. If the requester lacks a demonstrated need-to-know for that item, access is not provided. This approach embodies least privilege: people get access only to what they truly need to perform their duties. So the statement is true. Options suggesting it’s false or not specified don’t align with how need-to-know is typically applied in protecting classified information.