Provide an MDC3 approach for a data-sharing platform across teams that requires secure access controls and auditable data flows.

• A. Case: A data-sharing platform across teams requires secure access controls and auditable data flows; Approach: implement with ad hoc scripts and no governance.
• B. Case: A data-sharing platform across teams requires secure access controls and auditable data flows; Approach: define data governance, access controls, APIs, monitoring, and compliance checks, then implement with CI/CD and continuous evaluation.
• C. Case: A data-sharing platform across teams requires secure access controls; Approach: delay security until after deployment.
• D. Case: A data-sharing platform across teams requires secure access controls; Approach: focus only on data formatting.

Answer: (B)

Embed governance and automated security controls from the start, with continuous evaluation to maintain auditable data flows. The best approach explicitly defines data governance, access controls, APIs, monitoring, and compliance checks, then implements them through a CI/CD pipeline and ongoing evaluation. This creates a secure, auditable environment where who can access what data is clearly controlled, data movements are traceable, and security policies are enforced automatically as the system evolves. It also supports rapid development and deployment without sacrificing security, since checks and governance are baked into the pipeline and continuously re-evaluated.

The other paths miss essential pieces: one relies on ad hoc scripts with no governance, which leaves gaps in access control and auditability; another postpones security until after deployment, which is too late and risks unprotected data flows; and another focuses only on data formatting, ignoring access control and auditability entirely.