What must the IMS demonstrate?

What must the IMS demonstrate?

• A. The number of employees at the facility
• B. How the IMS accounts for, protects, and justifies the retention of classified information
• C. The security budget
• D. Physical security measures only

Answer: (B)

The IMS must show control over classified information throughout its life cycle—how it accounts for, protects, and justifies the retention of that information. This demonstrates accountability, proper handling, and compliance with policy, ensuring information isn’t lost, leaked, or kept longer than needed. The option describing these aspects is the best because it directly reflects what an IMS is responsible for: tracking access and location, applying appropriate protections, and providing a justified retention basis. The other possibilities focus on personnel counts, budget, or only physical security, which don’t capture the full scope of how information is managed and safeguarded.

The IMS must show control over classified information throughout its life cycle—how it accounts for, protects, and justifies the retention of that information. This demonstrates accountability, proper handling, and compliance with policy, ensuring information isn’t lost, leaked, or kept longer than needed. The option describing these aspects is the best because it directly reflects what an IMS is responsible for: tracking access and location, applying appropriate protections, and providing a justified retention basis. The other possibilities focus on personnel counts, budget, or only physical security, which don’t capture the full scope of how information is managed and safeguarded.