Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityMedium
A company is implementing a new security policy. They want to ensure that all actions performed on critical systems and sensitive data are traceable to the individual who performed them, and that there is an undeniable record of these actions. This is essential for compliance and forensic investigations. Which security principle is being emphasized?
- AAccountability
- BAvailability
- CIntegrity
- DConfidentiality
Show answer & explanationAnswer & explanation
Correct answer: A. Accountability
Accountability ensures that individuals can be held responsible for their actions within a system. This requires tracking and logging user activities to create an undeniable audit trail, which is crucial for compliance and forensic investigations.
Why the other options are wrong
- B. Availability ensures systems are accessible, which is unrelated to tracking user actions.
- C. Integrity ensures data is accurate and uncorrupted, but doesn't focus on attributing actions to users.
- D. Confidentiality protects data from unauthorized disclosure, not from recording who accessed it.
Accountability (Security)
Accountability in security refers to the ability to identify and track the actions of an entity (user, process, system) within a system, ensuring that their activities can be traced back to them for audit, investigation, and enforcement of security policies.
- Links actions to specific entities.
- Requires robust logging and auditing.
- Essential for non-repudiation and compliance.
Memory trick: CIA Triad and Accountability form the core.