If an unauthorized person requests information about munitions, what should you do first?

• A. Decline the request, verify authorization, and refer to the proper information security channel.
• B. Provide a brief answer and move on.
• C. Ask for an official letter before responding.
• D. Share the information to avoid escalation.

Answer: (A)

The key idea is protecting sensitive munitions information by enforcing authorization and proper handling through official channels. When someone who isn’t authorized asks for this kind of information, you should not disclose anything. You politely decline and state you can’t share the information. Then you verify whether the person has legitimate authorization to access it. If they are authorized, you route the request to the designated information security channel so it’s handled through the official process with proper records and control. This first decline prevents premature disclosure, and the subsequent verification and redirection ensure the information only goes to those with a valid need to know and through the proper security pathway.