What is the primary goal of information security?

The correct answer is D. To manage and mitigate risks. The primary goal of information security is to manage and mitigate risks - not to eliminate them entirely. Perfect confidentiality (A), zero incidents (B), and 100% availability (C) are unattainable absolutes. Security is fundamentally a risk management discipline…

Security Principles

Question

Options

ATo achieve perfect confidentiality
BTo prevent all security incidents
CTo ensure 100% system availability
DTo manage and mitigate risks

How the community answered

(47 responses)

A
4% (2)
B
2% (1)
D
94% (44)

Explanation

The primary goal of information security is to manage and mitigate risks - not to eliminate them entirely. Perfect confidentiality (A), zero incidents (B), and 100% availability (C) are unattainable absolutes. Security is fundamentally a risk management discipline: organizations identify threats and vulnerabilities, assess their likelihood and impact, and apply controls proportionate to the risk. The CIA triad (Confidentiality, Integrity, Availability) represents security objectives, but they are pursued within the context of acceptable risk levels, not absolute guarantees.

Topics

#Information security principles#Security objectives#Risk management fundamentals

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice