Which statement best describes controls over the distribution of media?

Which statement best describes controls over the distribution of media?

• A. Distribution control is optional for internal transfers.
• B. External distribution requires no controls if the data is non-sensitive.
• C. There is no need to document media ownership when distributing.
• D. Maintain strict control over the internal or external distribution of any kind of media.

Answer: (D)

Media containing sensitive information must be tightly controlled during distribution, because moving media creates opportunities for loss or unauthorized access. Whether distributing inside the organization or sending to an external party, you should limit who can receive the media, label and track it, document ownership, and protect it—ideally with encryption when appropriate. This approach ensures accountability and makes it easier to respond quickly if a media item goes missing. That’s why maintaining strict control over the internal or external distribution of any kind of media is the best answer. The other options imply looser controls or assumptions about data sensitivity that don’t meet the protection standards for cardholder data.

Media containing sensitive information must be tightly controlled during distribution, because moving media creates opportunities for loss or unauthorized access. Whether distributing inside the organization or sending to an external party, you should limit who can receive the media, label and track it, document ownership, and protect it—ideally with encryption when appropriate. This approach ensures accountability and makes it easier to respond quickly if a media item goes missing. That’s why maintaining strict control over the internal or external distribution of any kind of media is the best answer. The other options imply looser controls or assumptions about data sensitivity that don’t meet the protection standards for cardholder data.