Which of the following matching of Information to its Classification Level is correct

Which of the following matching of Information to its Classification Level is correct?
a. Source Code: Confidential; User Passwords: Highly Confidential, Organization Chart Internal, and Press Release: Public
b. Source Code: Highly Confidential; User Passwords: Internal; Organization Chart Highly Confidential, and Press Release: Public
c. Source Code: Internal; User Passwords: Confidential; Organization Chart: Highly Confidential; and Press Release: Public
d. Source Code: Highly Confidential; User Passwords: Highly Confidential; Organization Chart: Intemal; Press Release: Public

The correct answer and explanation is :

The correct answer is:
d. Source Code: Highly Confidential; User Passwords: Highly Confidential; Organization Chart: Internal; Press Release: Public

Explanation (300 words):

Classifying information accurately is critical for protecting organizational assets and ensuring cybersecurity. Each classification level determines the sensitivity of the data and who has access to it.

1. Source Code – Highly Confidential
   Source code is the backbone of software products and applications. Unauthorized access could lead to intellectual property theft, exploitation of vulnerabilities, or malicious modifications. Therefore, source code is typically classified as Highly Confidential, as its exposure could cause severe damage to the organization’s competitive position or operations.
2. User Passwords – Highly Confidential
   User passwords provide access to critical systems, user data, and potentially sensitive information. If compromised, attackers can impersonate users or escalate access within a system. Passwords are Highly Confidential because they must be tightly controlled and encrypted to prevent breaches or unauthorized access.
3. Organization Chart – Internal
   An organization chart typically includes names, roles, and reporting relationships. While not as sensitive as source code or passwords, it is not intended for public release. It may contain strategic information about staffing and internal structure. Thus, it is commonly marked as Internal, meaning access is limited to employees or authorized personnel within the organization.
4. Press Release – Public
   Press releases are created specifically for public distribution. They are meant to inform the media, customers, and the general public about company updates, products, or initiatives. As such, they are appropriately classified as Public.

By properly classifying these information types, organizations enforce appropriate access controls, reduce risks of data breaches, and ensure compliance with security policies or legal requirements. Misclassifying sensitive data can lead to regulatory penalties, loss of customer trust, or even corporate espionage. Therefore, answer (d) correctly aligns with standard data classification practices.