ISC2 Certified in Cybersecurity (CC)Security PrinciplesHard
A government agency is updating its data handling procedures to comply with new legislation regarding classified information. The new rules specify that data classified as 'Top Secret' must be stored on systems physically isolated from all other networks and accessed only by personnel with specific clearances in a secured facility. This approach primarily aims to enforce which security principle?
- AAvailability
- BIntegrity
- CNon-repudiation
- DConfidentiality
Show answer & explanationAnswer & explanation
Correct answer: D. Confidentiality
The measures described—physical isolation, specific clearances, and secured facilities—are all designed to prevent unauthorized disclosure of 'Top Secret' information. This directly addresses the principle of confidentiality.
Why the other options are wrong
- A. Availability ensures access to systems and data when needed, which is not the primary focus here.
- B. Integrity focuses on preventing unauthorized modification of data, not its disclosure.
- C. Non-repudiation ensures that actions cannot be denied, which is not the main goal of physical isolation for classified data.
Confidentiality
The principle that information should not be disclosed to unauthorized individuals, entities, or processes. It ensures data privacy and secrecy.
- Often enforced through encryption, access controls, and physical security.
- Crucial for sensitive data like PII, classified information, and trade secrets.
- Part of the CIA triad.
Memory trick: CIA: Confidentiality is secrecy, Integrity is accuracy, Availability is access.