SCENARIO Please use the following to answer the next QUESTIO N: Richard McAdams recently graduated law school and decided to return to the small town…

The question asks to identify the option that is NOT a security benefit of transitioning to internet faxing. While greater accessibility from an off-site location is a benefit of internet faxing, it is primarily an operational or convenience benefit, not a security one. In fact, increased accessibility can introduce new security risks if not managed with strong access controls. The other options—encryption, reduction of unauthorized physical access, and secure electronic storage with password protection—are all direct security enhancements that protect the confidentiality and integrity of the personal data contained in the faxes.

B: The ability to encrypt faxes during transmission is a core security benefit, protecting data from interception, which is not a feature of traditional analog faxing.

C: Internet faxing delivers documents to a specific user's secure inbox, eliminating the risk of papers being left on a communal machine for anyone to see or take.

D: Storing faxes on a password-protected server allows for robust access controls, audit trails, and secure lifecycle management, which are significant security upgrades from physical file cabinets.

1. IAPP

Privacy Program Management: Tools for Managing Privacy Within Your Organization

3rd ed.

2019

by Russell Densmore

CIPP/US

CIPT

FIP.

Chapter 5: Privacy and Security. This chapter discusses the implementation of technical controls to protect personal information. It emphasizes that controls like encryption (related to option B)

access control (related to options C and D)

and secure storage are fundamental to data security. The text distinguishes between security controls and operational features

implicitly supporting that remote accessibility (option A) is an operational feature whose security depends on the implementation of other controls.

2. National Institute of Standards and Technology (NIST)

Special Publication 800-53 Revision 5: Security and Privacy Controls for Information Systems and Organizations

2020.

AC (Access Control) Family: This control family details the necessity of limiting information system access to authorized users. This directly relates to options C and D

where internet faxing enables better electronic access control than a communal physical machine.

SC (System and Communications Protection) Family

specifically SC-8 (Transmission Confidentiality and Integrity) and SC-13 (Cryptographic Protection): These controls advocate for protecting information during transmission

which aligns with the encryption benefit described in option B. The standard does not list "greater accessibility" as a security control; rather

it is a factor that security controls must manage.

3. Al-Haj

A.

& Al-Roubaiey

A. A. (2011). Security of Internet Faxing. International Journal of Network Security & Its Applications

3(1)

115–126. https://doi.org/10.5121/ijnsa.2011.3110

Section 3

"Security in Internet Faxing": This academic paper explicitly outlines the security advantages of Internet faxing over traditional PSTN-based faxing. It highlights encryption (TLS/SSL)

authentication

and secure storage as key security benefits. It discusses accessibility as a functional advantage but frames the security challenge as one of ensuring that this increased access is properly controlled and authenticated

confirming that accessibility itself is not the security benefit.