Which statement BEST describes how sensitive data should be handled in Foundry applications?

• A. Sensitive data should be unprotected to improve performance.
• B. Sensitive data should be protected through proper access controls and governance frameworks.
• C. Sensitive data should be encrypted without access controls.
• D. Sensitive data should be stored publicly for cross-team sharing.

Answer: (B)

Sensitive data in Foundry should be protected by formal access controls and governance frameworks. This means assigning clear permissions so only authorized users can view or modify data, applying roles and policies that enforce who can access what, and maintaining an auditable governance process that tracks data usage and enforcement across datasets, pipelines, and projects. This approach ensures confidentiality, regulatory compliance, and accountability, while still allowing legitimate collaboration under controlled conditions.

Other options miss the essential aspect of controlled access and policy enforcement: leaving data unprotected or publicly accessible violates security and privacy expectations, encryption without access controls can still permit misuse by those who can decrypt, and storing data publicly defeats the purpose of protecting sensitive information.