What is the purpose of accountability in information security?

The correct answer is D. To track and monitor user actions. Accountability in information security ensures that every action taken on a system can be traced back to a specific individual. It is implemented through audit logs, activity monitoring, and audit trails. This supports forensic investigations and deters malicious behavior…

Security Principles

Question

Options

ATo prevent unauthorized access
BTo ensure data confidentiality
CTo establish non-repudiation
DTo track and monitor user actions

How the community answered

(39 responses)

A
3% (1)
C
5% (2)
D
92% (36)

Explanation

Accountability in information security ensures that every action taken on a system can be traced back to a specific individual. It is implemented through audit logs, activity monitoring, and audit trails. This supports forensic investigations and deters malicious behavior. Non-repudiation (choice C) is closely related but specifically ensures a user cannot deny an action they performed. Preventing unauthorized access is the purpose of access control, and data confidentiality is a separate security goal.

Topics

#Accountability#Security Principles#Auditing#Security Operations

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice