Which process is responsible for the availability, confidentiality and integrity of data?

The correct answer is D. Information security management. Information Security Management (D) owns the CIA triad - Confidentiality, Integrity, and Availability - which are the three pillars of data protection, making it the direct fit for this question. A (Service Catalogue Management) maintains a list of available IT services; it has…

Basic concepts of information security

Question

Options

AService catalogue management
BService asset and configuration management
CChange management
DInformation security management

How the community answered

(46 responses)

A
2% (1)
C
4% (2)
D
93% (43)

Explanation

Information Security Management (D) owns the CIA triad - Confidentiality, Integrity, and Availability - which are the three pillars of data protection, making it the direct fit for this question.

A (Service Catalogue Management) maintains a list of available IT services; it has nothing to do with protecting data.
B (Service Asset and Configuration Management / SACM) tracks and manages configuration items (CIs) and assets, focusing on accuracy of records rather than data security.
C (Change Management) controls the lifecycle of changes to minimize disruption; while it indirectly supports stability, it is not responsible for security properties.

Memory tip: Think CIA = ISM - the CIA triad (Confidentiality, Integrity, Availability) is the definition of Information Security Management's purpose. If a question mentions any combination of those three words, the answer is almost always Information Security Management.

Topics

#CIA triad#information security management#availability#confidentiality

Community Discussion

No community discussion yet for this question.

Full ISFS Practice