Which concept is defined as the trustworthiness of preventing improper and unauthorized changes of data or resources?

Which concept is defined as the trustworthiness of preventing improper and unauthorized changes of data or resources?

• A. Confidentiality
• B. Integrity
• C. Availability
• D. Non-Repudiation

Answer: (B)

Integrity is about ensuring data and resources aren’t altered by unauthorized parties, and that any changes are authorized, tracked, and verifiable. In practice, this means using checksums or hashes to detect tampering, digital signatures to verify authenticity, access controls to prevent unauthorized edits, and audit trails to prove what changed and when. When data is kept accurate and unmodified except by permitted actions, its trustworthiness is preserved. Confidentiality protects information from being disclosed to unauthorized parties, ensuring privacy. Availability ensures systems and data are accessible to authorized users when needed. Non-repudiation provides proof that a party performed a transaction and cannot deny it later. These concepts address different aspects of security, while integrity focuses specifically on preventing improper or unauthorized changes to data or resources.

Integrity is about ensuring data and resources aren’t altered by unauthorized parties, and that any changes are authorized, tracked, and verifiable. In practice, this means using checksums or hashes to detect tampering, digital signatures to verify authenticity, access controls to prevent unauthorized edits, and audit trails to prove what changed and when. When data is kept accurate and unmodified except by permitted actions, its trustworthiness is preserved.

Confidentiality protects information from being disclosed to unauthorized parties, ensuring privacy. Availability ensures systems and data are accessible to authorized users when needed. Non-repudiation provides proof that a party performed a transaction and cannot deny it later. These concepts address different aspects of security, while integrity focuses specifically on preventing improper or unauthorized changes to data or resources.