An organization publishes and periodically updates its employee policies in a file on their intranet. Which of the following is a PRIMARY security concern?

Availability concerns whether the resource is accessible when needed; while important, it is not the primary concern for an intranet policy file that is simply published and updated periodically.

Confidentiality protects sensitive information from unauthorized disclosure, but employee policies are intentionally made accessible to all employees on the intranet, so restricting access is not the primary concern.

Integrity ensures that data remains accurate, consistent, and unaltered by unauthorized parties. For a policy document that is periodically updated and relied upon by employees, the primary risk is that the file could be maliciously or accidentally modified to contain incorrect or misleading policies. Controls such as hashing, digital signatures, and access controls protect the integrity of such documents.

Ownership is not a formal pillar of the CIA triad and does not represent a primary security concern in this context; it is a governance/administrative concept rather than a core information security objective.