Which statement best describes the integrity element of the CIA triad?
- AIt ensures that information and systems remain accessible to authorised users when they are needed.
- BIt ensures that data is protected from unauthorised modification and that any change can be detected. Correct
- CIt ensures that only individuals with a legitimate need can read the contents of a message or file.
- DIt ensures that a sender cannot later deny having created or sent a particular message or transaction.
Why A is wrong: Tempting because accessibility is clearly a core security goal, but this statement defines availability, not integrity. Integrity is about correctness of data, not whether users can reach it.
Why B is correct: Correct. Integrity guarantees that data has not been altered in an unauthorised or undetected way, typically enforced through hashing, digital signatures, and access controls.
Why C is wrong: Tempting because limiting who can read data is a common security control, but restricting disclosure is the definition of confidentiality, not integrity.
Why D is wrong: Tempting because preventing denial of an action is a familiar security property, but that property is non-repudiation, which is a separate concept from integrity.