nerdexam
Isaca

CISM · Question #56

Which of the following is the MOST relevant control to address the integrity of information?

The correct answer is D. Assignment of appropriate access permissions. Assigning appropriate access permissions is the most relevant control for information integrity, as it directly restricts unauthorized modifications or deletions of data.

Submitted by tom_us· Apr 18, 2026Information Security Program Development and Management

Question

Which of the following is the MOST relevant control to address the integrity of information?

Options

  • AImplementation of a redundant server system
  • BEncryption of email
  • CImplementation of an Internet security application
  • DAssignment of appropriate access permissions

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    8% (3)
  • D
    86% (32)

Why each option

Assigning appropriate access permissions is the most relevant control for information integrity, as it directly restricts unauthorized modifications or deletions of data.

AImplementation of a redundant server system

A redundant server system addresses availability by ensuring continuous operation, but it does not directly prevent unauthorized modification of data.

BEncryption of email

Encryption of email primarily addresses confidentiality by protecting data from unauthorized viewing, not unauthorized modification during transit or at rest.

CImplementation of an Internet security application

An Internet security application provides general protection against various threats, but specific access controls are more granular and directly targeted at preventing integrity breaches.

DAssignment of appropriate access permissionsCorrect

Assignment of appropriate access permissions is the most relevant control for information integrity because it directly dictates who can create, modify, or delete data. By restricting write access to only authorized individuals and processes, it prevents unauthorized or accidental changes, ensuring that information remains accurate and complete.

Concept tested: Information integrity controls (Access control)

Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview

Topics

#Information Integrity#Access Control#CISM Controls#CIA Triad

Community Discussion

No community discussion yet for this question.

Full CISM Practice