Among the statements about spillage, the one that is true is: Spillage can be either inadvertent or intentional. Spillage refers to the unauthorized transfer or release of classified or sensitive information into an environment not cleared for such information. This release can happen accidentally, such as sending classified data over an unsecured email, or intentionally, as a willful leak or disclosure of information. It is not necessarily about information being downgraded or publicly disclosed, but rather the exposure of sensitive data in unauthorized environments.
In a broader sense outside classified information, spillage also refers to accidental release or overflow of substances from containers, chemical spills, or loss of production in manufacturing due to defective products. But specifically for information security, the key truth is that spillage can be either inadvertent or intentional.