What is the primary goal of an information security program?

Question

Options

• ATo ensure usability of the system
• BTo increase data processing speeds
• CTo protect the confidentiality, integrity, and availability of data
• DTo promote an open and shared environment

• A
  2% (1)
• B
  6% (3)
• C
  90% (47)
• D
  2% (1)

Explanation

Protecting the confidentiality, integrity, and availability of data - known as the CIA Triad - forms the foundational goal of any information security program, making C correct. Every security control, policy, and mechanism ultimately maps back to one or more of these three properties.

Why the distractors are wrong:

• A (usability) - Usability is a design or UX concern; security often intentionally reduces frictionless access to protect assets.
• B (data processing speeds) - Performance optimization belongs to systems engineering, not security programs.
• D (open/shared environment) - This directly conflicts with security; unrestricted sharing undermines confidentiality and control.

Memory tip: Remember CIA - Confidentiality (only the right people see it), Integrity (data isn't tampered with), Availability (authorized users can access it when needed). If an exam question asks about the primary goal or core objective of information security, CIA Triad is almost always the answer.

No community discussion yet for this question.