Information Security is defined as the protection of information to ensure what?

Information Security is defined as the protection of information to ensure what?

• A. Confidentiality, integrity, and availability.
• B. Privacy, authenticity, and non-repudiation.
• C. Accessibility, reliability, and scalability.
• D. Authentication, authorization, and accounting.

Answer: (A)

Information security aims to protect information so that it remains confidential, accurate, and available to those who are authorized to access it. These three goals form the CIA triad: confidentiality means information isn’t disclosed to unauthorized people or systems; integrity means the information is accurate and not altered in an unauthorized way; availability means information and systems are accessible to authorized users when needed. This framing best captures the overall purpose of information security. The other options bring up related concepts, but they aren’t the core set that defines information security goals: privacy, authenticity, and non-repudiation describe specific protections or assurances but aren’t the primary trio; accessibility, reliability, and scalability describe system performance traits; authentication, authorization, and accounting relate to identity and access management, not the fundamental security objectives.

Information security aims to protect information so that it remains confidential, accurate, and available to those who are authorized to access it. These three goals form the CIA triad: confidentiality means information isn’t disclosed to unauthorized people or systems; integrity means the information is accurate and not altered in an unauthorized way; availability means information and systems are accessible to authorized users when needed. This framing best captures the overall purpose of information security.

The other options bring up related concepts, but they aren’t the core set that defines information security goals: privacy, authenticity, and non-repudiation describe specific protections or assurances but aren’t the primary trio; accessibility, reliability, and scalability describe system performance traits; authentication, authorization, and accounting relate to identity and access management, not the fundamental security objectives.