Two security professionals discuss actual versus potential compromise. The following claim is correct: 'The actual compromise involves an authorized disclosure of classified information.' The other claim is correct: 'Not all security violations involve actual compromise; all involve the potential for compromise.' Who is correct?

• A. The actual compromise involves an authorized disclosure of classified information.
• B. Not all security violations involve actual compromise; all involve the potential for compromise.
• C. Both A and B are correct.
• D. Neither A nor B is correct.

Answer: (A)