CAP: Security Assessment and Authorization Certification | C.I.A Triad Integrity Objectives

C.I.A Triad Integrity Objectives

Question

Which of the following objectives are defined by integrity in the C.I.A triad of information security systems? Each correct answer represents a part of the solution.

Choose three.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

ABC.

The C.I.A triad is a model designed to guide policies for information security within an organization. The triad consists of three key objectives that should be considered for any information security program: confidentiality, integrity, and availability.

Integrity in the C.I.A triad refers to the assurance that information is protected against unauthorized or unintentional modification, destruction, or disclosure. Integrity ensures that data is complete, accurate, and trustworthy.

The correct answers are:

A. It preserves the internal and external consistency of information. Integrity ensures that information is consistent and accurate, both internally within a system and externally between systems.

B. It prevents the unauthorized or unintentional modification of information by the authorized users. Integrity ensures that authorized users cannot make unauthorized or unintentional changes to information.

C. It prevents the modification of information by the unauthorized users. Integrity ensures that unauthorized users cannot modify information in any way, shape or form.

D. It prevents the intentional or unintentional unauthorized disclosure of a message's contents. Confidentiality, not integrity, is the objective that protects against unauthorized disclosure. It ensures that information is accessible only to authorized individuals or systems.

Therefore, options A, B, and C are the correct answers as they relate to the objectives defined by integrity in the C.I.A triad.