To protect confidentiality, which combination is recommended for records storage?

• A. Encrypted electronic records and locked storage for physical files
• B. Unencrypted electronic records stored in a public cloud
• C. Locked physical files but unencrypted electronic records
• D. No safeguards needed

Answer: (A)

Safeguarding confidentiality means applying both encryption for electronic records and secure, locked storage for physical documents. Encrypting electronic records keeps the data unreadable to anyone without the decryption key, even if the files are accessed without permission. Locking physical files prevents access to paper records by unauthorized individuals. Using both together creates defense in depth and reduces risk from both cyber and physical threats, which is why encrypted electronic records plus locked storage for physical files is the best approach.

The other options fall short because unencrypted electronic records in a public cloud expose data to potential interception or access, especially in environments where security controls may be shared or misconfigured. Having only locked physical files but unencrypted electronic records leaves digital data vulnerable to breaches. And claiming no safeguards are needed ignores real risks and legal/ethical obligations to protect client confidentiality.