Regarding need to know and access to classified information, statements that assignment to a position grants need-to-know and that verification of need to know and access is the holder's responsibility are both correct.

Regarding need to know and access to classified information, statements that assignment to a position grants need-to-know and that verification of need to know and access is the holder's responsibility are both correct.

• A. Both are correct
• B. Only assignment to position is correct
• C. Only holder's responsibility is correct
• D. Neither is correct

Answer: (A)

Access to classified information is controlled by need-to-know. Being assigned to a specific position provides the basis for need-to-know, linking access to the duties of that role. At the same time, the person who has access must verify that they still have a legitimate need-to-know and the corresponding access for their current duties. In practice, this means you should only access information necessary for your official tasks and you should actively ensure your access aligns with your role, reporting changes in duties or status that would affect need-to-know. Therefore, both statements are correct: assignment to a position establishes the need-to-know, and the holder bears the responsibility to verify ongoing need-to-know and access. If your duties change or you are reassigned, you should adjust access accordingly and not continue to access information no longer needed.

Access to classified information is controlled by need-to-know. Being assigned to a specific position provides the basis for need-to-know, linking access to the duties of that role. At the same time, the person who has access must verify that they still have a legitimate need-to-know and the corresponding access for their current duties. In practice, this means you should only access information necessary for your official tasks and you should actively ensure your access aligns with your role, reporting changes in duties or status that would affect need-to-know.

Therefore, both statements are correct: assignment to a position establishes the need-to-know, and the holder bears the responsibility to verify ongoing need-to-know and access. If your duties change or you are reassigned, you should adjust access accordingly and not continue to access information no longer needed.