A security infraction, compared to a security violation, does not place classified information at risk.

A security infraction, compared to a security violation, does not place classified information at risk.

• A. True
• B. False
• C. Not enough information
• D. Both true and false

Answer: (B)

The risk to classified information comes from failing to follow security controls, not from the idea that one type of failure is inherently risk-free. A security infraction is a deviation from policy, and such deviations can create exposure or weaken protections just as a security violation can. The level of risk depends on the specific context, such as what data was involved, how access was granted, and what safeguards were bypassed or not enforced. Therefore, it’s not correct to claim that an infraction does not put classified information at risk; in many cases it can, sometimes as seriously as a violation. Hence the statement is False.

The risk to classified information comes from failing to follow security controls, not from the idea that one type of failure is inherently risk-free. A security infraction is a deviation from policy, and such deviations can create exposure or weaken protections just as a security violation can. The level of risk depends on the specific context, such as what data was involved, how access was granted, and what safeguards were bypassed or not enforced. Therefore, it’s not correct to claim that an infraction does not put classified information at risk; in many cases it can, sometimes as seriously as a violation. Hence the statement is False.