A city's cyber strategy says IT owns data protection, yet personnel files sit in unlocked cabinets and on shared drives. How should HR align employee-file controls?
Select an answer to reveal the explanation.
Short Explanation
Locking the front door and leaving the filing cabinet open is not security. Personnel files are data whether they live on paper or a shared drive. HR owns those files; IT's cyber plan does not make the cabinet someone else's problem.
Full Explanation
Employee-file security is part of enterprise data protection, not a side cabinet outside the cyber strategy. HR must apply the same confidentiality, access, and retention logic to paper and electronic personnel records and remain an accountable owner rather than a bystander to IT. Unlocked files, supervisor email caches, and public posting all expand exposure. Alignment means controls that match the organization's data-protection strategy across both media.