A new analyst receives an incident report containing personal information. How should it be shared?

1. Through a personal public file-sharing account
2. Without preserving the original report
3. Only with authorized recipients through approved channels
4. With every employee by default