Which fundamental security goal is defined as keeping information private and protected from unauthorized access?

Which fundamental security goal is defined as keeping information private and protected from unauthorized access?

• A. Confidentiality
• B. Integrity
• C. Availability
• D. Non-repudiation

Answer: (A)

Keeping information private and protected from unauthorized access is confidentiality. It focuses on ensuring that data is accessible only to those who are authorized, using protections like encryption, strong authentication, and access controls. In practice, confidentiality means that even if data is intercepted or exposed, it remains unreadable to unauthorized parties. In contrast, integrity is about data staying accurate and unaltered, verified through mechanisms like hashes and digital signatures. Availability ensures that data and systems are accessible to authorized users when needed, supported by measures like redundancy and reliable infrastructure. Non-repudiation ensures that actions cannot be denied later, often through digital signatures and comprehensive audit trails. So the concept described—keeping information private and protected from unauthorized access—best fits confidentiality.

Keeping information private and protected from unauthorized access is confidentiality. It focuses on ensuring that data is accessible only to those who are authorized, using protections like encryption, strong authentication, and access controls. In practice, confidentiality means that even if data is intercepted or exposed, it remains unreadable to unauthorized parties.

In contrast, integrity is about data staying accurate and unaltered, verified through mechanisms like hashes and digital signatures. Availability ensures that data and systems are accessible to authorized users when needed, supported by measures like redundancy and reliable infrastructure. Non-repudiation ensures that actions cannot be denied later, often through digital signatures and comprehensive audit trails.

So the concept described—keeping information private and protected from unauthorized access—best fits confidentiality.