Question 19
Domain 4: Transparency, Governance, and AccountabilityA governance team is preparing a public update about a new transparency initiative. To align with the principle in the source material, which information should they share?
Correct answer: B
Explanation
Share information only when it does not expose sensitive assets. Transparency should be balanced against protecting information that could create risk if disclosed. — Source material: "Determine what information can be shared without exposing sensitive assets."
Why each option is right or wrong
A. Detailed internal asset inventories that identify sensitive systems and resources
Information should be shared only if it does not expose sensitive assets.
B. General information about the initiative that does not reveal sensitive assets
The source states that information may be shared when doing so does not expose sensitive assets. A general public update about the initiative fits that condition because it communicates progress while avoiding disclosure of protected assets.
C. Technical descriptions that indirectly reveal the location of sensitive assets
Information should be shared only if it does not expose sensitive assets.
D. Operational details whose release could identify sensitive assets through context
Information should be shared only if it does not expose sensitive assets.