ISC2 Certified in Cybersecurity (CC)Security PrinciplesEasy
A small e-commerce startup is developing a new online store. They are particularly concerned about ensuring that customers cannot falsely deny making a purchase after an order has been placed and confirmed. Which security principle directly addresses this concern?
- ANon-repudiation
- BConfidentiality
- CAvailability
- DIntegrity
Show answer & explanationAnswer & explanation
Correct answer: A. Non-repudiation
Non-repudiation ensures that a party cannot deny having performed an action. In this e-commerce scenario, it prevents customers from denying a purchase, which is crucial for business operations.
Why the other options are wrong
- B. Confidentiality protects information from unauthorized disclosure, which is not the primary concern here.
- C. Availability ensures systems and data are accessible when needed, unrelated to denying actions.
- D. Integrity protects data from unauthorized modification, not from denying an action that has occurred.
Non-repudiation
The assurance that someone cannot deny the validity of something. It provides undeniable proof of origin or delivery of data, preventing a sender from denying they sent a message or a receiver from denying they received a message.
- Ensures accountability for actions
- Often achieved through digital signatures and logs
- Crucial for legal and financial transactions
Memory trick: CIA Triad and Beyond: Confidentially, Integrity, Availability, plus Authenticity, Non-repudiation, and Accountability.