According to the PMBOK Guide, the project manager is responsible for managing the project information and ensuring that it is appropriately distributed, stored, and protected. The project manager should also adhere to the policies and procedures regarding the confidentiality and security of the project information. If the project sponsor requests technical specifications for a project-related component that he or she does not have the authorization to see, the project manager should first meet with the project sponsor as soon as possible to discuss the matter further and understand the reason behind the request. The project manager should also explain the implications of disclosing the specifications without proper authorization and try to resolve the issue amicably. Updating the issue log, creating a stakeholder engagement plan, or providing the specifications with some information removed are possible actions that the project manager can take after meeting with the project sponsor, depending on the outcome of the discussion. However, they are not the first actions that the project manager should take in this situation. References: PMBOK Guide, 6th edition, pages 376-377,
395-396.