What is the recommended action when a stakeholder outside the distribution list requests information?

• A. Acknowledge their request and check inclusion before sharing data.
• B. Share all data publicly to avoid delays.
• C. Ignore the request until they contact the project sponsor.
• D. Refer them to the marketing coordinator's personal email.

Answer: (A)

When handling information requests, the priority is controlled, authorized access. The best action is to acknowledge the request and verify whether the requester is on the distribution list or otherwise authorized to receive the data before sharing anything. This protects privacy, maintains governance, and creates an audit trail of who has access. If they’re authorized, share through the approved channel; if not, follow the proper process—confirm need-to-know with the project sponsor or data owner and update distribution lists as required. Sharing data publicly or through a personal email bypasses protections and risks leaking sensitive information, while ignoring the request delays stakeholders.