When using email for internal corrections communications, what security practice must be followed?

• A. Use personal email for convenience.
• B. Use official institutional email, avoid sensitive content, include standard signature blocks, and adhere to encryption and retention policies; do not forward restricted information to unauthorized recipients.
• C. Share sensitive content with all recipients.
• D. Ignore retention policies.

Answer: (B)

Using official institutional email with proper controls is essential for internal corrections communications. This approach keeps messages within the organization’s system, allows encryption where required, and makes retention policies enforceable so that records are kept or disposed of appropriately. A standard signature block helps identify the sender and provides necessary contact and department information, supporting accountability and consistency. Importantly, it prevents forwarding restricted information to unauthorized recipients, protecting confidentiality and complying with policy.

Personal email bypasses security controls and creates greater risk of data exposure; sharing sensitive content with all recipients violates the need-to-know principle and confidentiality; ignoring retention policies jeopardizes legal compliance and proper recordkeeping.