A security practitioner is asked by an executive to share confidential employee investigation records with HR without a formal request. The correct action is to:
-
A
Share the records since HR is an internal department
-
B
Require a formal written request following established protocols
-
C
Refuse permanently regardless of circumstances
-
D
Share only a verbal summary to avoid documentation