ISC2 Certified in Cybersecurity (CC)Security PrinciplesMedium
A healthcare organization is implementing a new electronic health record (EHR) system. They are particularly concerned about ensuring that patient data remains accurate and unaltered during storage and transmission. Which security principle is this organization primarily focused on maintaining?
- AAccountability
- BAvailability
- CConfidentiality
- DIntegrity
Show answer & explanationAnswer & explanation
Correct answer: D. Integrity
Ensuring data remains accurate and unaltered directly relates to the principle of integrity, which protects against unauthorized modification or destruction of data.
Why the other options are wrong
- A. Accountability ensures that actions can be traced to an individual, which is related but not the primary focus of keeping data accurate and unaltered.
- B. Availability ensures systems and data are accessible when needed.
- C. Confidentiality protects data from unauthorized disclosure.
Integrity
The principle that data is accurate, complete, and protected from unauthorized modification or destruction.
- Ensures data trustworthiness and reliability.
- Achieved through hashing, digital signatures, and access controls.
- Crucial for critical data like financial or health records.
Memory trick: Confidentiality, Integrity, and Availability: Your CIA agent protects your secrets, keeps your files true, and is always there when you call.