ISC2 CISSP (Certified Information Systems Security Professional)Security and Risk ManagementEasy
A healthcare provider is implementing a new electronic health record (EHR) system. The project manager is concerned about ensuring that patient data remains accurate and unaltered throughout its lifecycle, from input by medical staff to archival. Which core security concept is primarily being addressed by this concern?
- AConfidentiality
- BIntegrity
- CNon-repudiation
- DAvailability
Show answer & explanationAnswer & explanation
Correct answer: B. Integrity
The concern about data being 'accurate and unaltered' directly relates to the concept of integrity, which ensures that information is protected from unauthorized modification or destruction, and that it is accurate and complete.
Why the other options are wrong
- A. Confidentiality protects against unauthorized disclosure of information.
- C. Non-repudiation ensures that a party cannot deny having performed an action.
- D. Availability ensures that systems and data are accessible when needed.
Integrity
The assurance that information is protected from unauthorized modification or destruction, and that it is accurate and complete.
- Ensures data trustworthiness and reliability.
- Often maintained through hashing, digital signatures, and access controls.
- Crucial for financial, medical, and legal data.
Memory trick: CIA: Keep secrets, always on, and true.