Which term describes a determination to safeguard information at a lower level than previously designated?

• A. Downgrade
• B. Duration
• C. Entity
• D. ECP

Answer: (A)

In information security, downgrading is the act of lowering the protection level assigned to information after a review of its sensitivity. This happens when the data is deemed less secret or when access restrictions can be eased without increasing risk—so the safeguarding level is reduced compared to what was originally designated. For example, a document that was initially labeled as confidential might be downgraded to internal use or unclassified once its sensitive elements are removed or the project concludes. Any downgrade typically requires proper authorization and documentation to prevent unintended exposure.

The other terms don’t fit this idea: duration relates to time, entity refers to a person or organization, and ECP is not about adjusting security classifications.