A staff member of the EU must collaborate securely with colleagues from different delegations abroad to manage a humanitarian aid project involving sensitive beneficiary data. According to digital security and data protection principles, which is the most appropriate measure for sharing this confidential file? option_A: Send the attached file by personal email to ensure it reaches all recipients immediately. option_B: Print the document and send it by certified postal mail to avoid any risk of cyberattack in digital transmission. option_C: Share the access link to the file through a secure EU document management platform, setting specific permissions and end-to-end encryption. option_D: Split the file into several parts and send them by SMS to ensure the information is not intercepted on the network. option_E: Upload the file to a free public cloud (e.g., a personal version of a storage service) to facilitate real-time editing. Explanation: 1) The correct answer is **C** because the General Data Protection Regulation (GDPR) and the EU's cybersecurity rules require that sensitive data be processed and transmitted through secure and authorized channels. Using official EU platforms with fine-grained access controls (specific permissions) and end-to-end encryption ensures the confidentiality and integrity of the data, aligning with the 'security by design' principle. 2) The incorrect options present the following traps: - **Option C (Partial Truth/Inaction):** Although email is a communication tool, sending sensitive data through a *personal* email without encryption or access controls violates security policies and the GDPR, exposing the data to interception. - **Option C (Overgeneralization):** Public cloud services are not compliant with the strict data sovereignty and security standards required for sensitive EU data, and using a personal account creates a risk of data leakage. - **Option C (False Security):** While certified postal mail is physically secure, it is impractical for real-time digital collaboration and does not address the need for digital management of sensitive data; moreover, physical sending is not a measure of 'digital security' or 'cloud computing' as suggested by the context of the question. - **Option C (Incorrect Metric):** Sending sensitive data by SMS is extremely insecure and not a valid method for transferring files; this option exploits the incorrect idea that 'short messages are more secure'. Quick Tip: Remember that in the context of the EU, 'secure' always means 'official authorized platform with encryption and access controls', never personal services or non-digital methods for tasks that require digital collaboration.