Which data classification requires the strongest handling and access controls?

• A. Public
• B. Internal
• C. Restricted
• D. Confidential

Answer: (C)

Data sensitivity guides how strictly data must be protected. The more sensitive the information, the tighter the handling and access controls should be, including need-to-know access, strong authentication, encryption, and thorough auditing.

In this framework, the highest level of control is required for data labeled as restricted. This category is treated as highly sensitive, so access is limited to a very small group of authorized users, and handling procedures are stringent to prevent leaks or misuse.

Public data is the least sensitive and can be exposed with minimal protections. Internal data needs protection against casual disclosure, but its controls aren’t as stringent as restricted. Even though confidential data is also highly sensitive and requires strong protections, the scenario here identifies restricted as the level needing the strongest controls, making it the correct choice.