What does the term "Integrity" mean in the context of Information Security Management?

Question

Options

• AProtecting the information against unauthorized use
• BMonitoring the access to information
• CThe accuracy, completeness and correctness of the information
• DScreening the support staff on their loyalty to the IT organization

• A
  3% (1)
• B
  3% (1)
• C
  5% (2)
• D
  89% (34)

Explanation

There appears to be an error in the provided answer key - D is not correct. The universally accepted definition of "Integrity" in Information Security Management is C: The accuracy, completeness, and correctness of the information.

Why C is correct: Integrity is one of the three pillars of the CIA triad (Confidentiality, Integrity, Availability). It means data is trustworthy - it has not been improperly altered, is complete, and accurately reflects reality.

Why the other options are wrong:

• A describes Confidentiality - restricting access to authorized users only.
• B describes an access control/auditing mechanism, not a security property itself.
• D describes personnel vetting/background checks, which relates to HR security practices but is not a definition of Integrity.

Memory tip: Use the CIA triad acronym - Confidentiality (who can see it), Integrity (is it accurate and untampered?), Availability (can you get to it when needed?). Integrity = "can I trust this data is correct and unchanged?"

I'd recommend double-checking your source material, as the listed answer key contains an error that could cause confusion on a real exam.

No community discussion yet for this question.