Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityMedium
A regulatory body has mandated that a healthcare organization must be able to demonstrate that all changes to patient medical records are traceable to the specific individual who made them, along with the timestamp of the change. Which security principle is being emphasized by this mandate?
- AConfidentiality
- BAccountability
- CLeast Privilege
- DAvailability
Show answer & explanationAnswer & explanation
Correct answer: B. Accountability
Accountability ensures that actions performed on a system can be traced back to the individual responsible, which is crucial for demonstrating compliance and preventing repudiation of actions.
Why the other options are wrong
- A. Confidentiality prevents unauthorized disclosure, which is not the primary focus of tracing changes.
- C. Least Privilege limits access rights, but doesn't inherently provide traceability of actions performed within those rights.
- D. Availability ensures access to data, not the traceability of changes.
Accountability (Security)
The security principle that ensures that individuals can be held responsible for their actions on a system.
- Requires logging and auditing capabilities.
- Links actions to specific users and timestamps.
- Essential for compliance, forensics, and non-repudiation.
Memory trick: Accountability Logs Every Action