Security Policy is a definition of what it means to be secure for a system, organization or other entity. For Information Technologies, there are sub-policies like Computer Security Policy, Information Protection Policy, Information Security Policy, network Security Policy, Physical Security Policy, Remote Access Policy, and User Account Policy. What is the main theme of the sub-policies for Information Technologies?

Question

Accepted Answer

C. Confidentiality, Integrity, Availability Confidentiality, Integrity, and Availability form the CIA triad, the universally recognized core model of information security. Every IT security sub-policy (Network Security, Remote Access, User Account, etc.) is designed to enforce or protect one or more of these three properties. NIST and other standards bodies define this triad as the central theme of all information security practice.

Answer

A. Availability, Non-repudiation, Confidentiality Non-repudiation is a valid security property but is not part of the CIA triad; replacing Integrity with Non-repudiation makes this set incorrect as the 'main theme' of IT security sub-policies.

Answer

B. Authenticity, Integrity, Non-repudiation Authenticity and Non-repudiation are security concepts but neither belongs to the core CIA triad, making this combination incorrect as the foundational framework.

Answer

D. Authenticity, Confidentiality, Integrity Authenticity is not a component of the CIA triad; Availability is the missing element here, and without it this set does not represent the correct foundational model.

Security Policy is a definition of what it means to be secure for a system, organization or other entity. For Information Technologies, there are sub-policies like Computer Security Policy…

Question

Options

How the community answered

Why each option

Topics

Community Discussion