Which statement correctly describes the relationship between a classification level and safeguarding requirements?

• A. The higher the level, the greater the protection needed
• B. The higher the level, the less protection
• C. The level does not affect safeguarding
• D. All levels require identical protection

Answer: (A)

The main idea here is that safeguarding should grow with how sensitive the information is. When something is classified at a higher level, the potential impact of it being disclosed, lost, or altered increases. So the protections around it must be stronger and more comprehensive. This means stricter access controls and need-to-know rules, stronger authentication, encryption both at rest and in transit, better key management, more thorough auditing and monitoring, and tighter physical security and incident response measures. In short, the level of protection scales with the classification level to match the risk.

The other possibilities don’t fit because they imply either weakening protection as sensitivity increases, no linkage between classification and safeguards, or the same protections for all levels. That would ignore the fundamental goal of safeguarding: to reduce risk in line with how sensitive the information is.