Which of the following best describes the scope of information security within MSCs?

• A. Protect physical access controls only
• B. Manage marketing data
• C. Access control to information systems and data
• D. Track supplier invoices electronically

Answer: (C)

Information security in MSCs focuses on protecting information assets by controlling who can access systems and data, and what they are allowed to do with them. This is achieved through access control mechanisms—authentication to verify identity, authorization to grant appropriate permissions, and ongoing management of those permissions as roles change. By restricting access to authorized individuals, you prevent unauthorized viewing, alteration, or loss of data and help ensure systems remain available for legitimate users. Physical security matters, but information security also covers digital assets and processes, so simply protecting physical access or handling specific data (like marketing data or invoices) doesn’t fully describe the scope. The description that emphasizes access control to information systems and data best captures the full scope.