Your organization is handling sensitive government contracts and must ensure that information related to these projects is guarded against unauthorized physical access. In accordance with data classification policies, which of the following is the BEST way to handle such data?
Store the data in a physically secure location and enforce strict access controls
Encrypt all data and frequently change encryption keys
Enable detailed logging of all access to the data for audit purposes
Institute policies for secure disposal of printouts and storage media containing the data