Which term refers to the assurance that the integrity, availability, confidentiality and authenticity of information and information systems are protected during usage, processing, storage, and transmission of information?

Which term refers to the assurance that the integrity, availability, confidentiality and authenticity of information and information systems are protected during usage, processing, storage, and transmission of information?

• A. Information Assurance (AI)
• B. Information Security Management Program
• C. Reconnaissance
• D. Scanning

Answer: (A)

Information Assurance is the practice of ensuring that information and information systems remain trustworthy by preserving confidentiality, integrity, availability, and authenticity throughout usage, processing, storage, and transmission. It combines policies, risk management, governance, and security controls to provide confidence that data is protected against unauthorized access, alteration, or disruption while still being accessible to authorized users. This broader, ongoing assurance across the information lifecycle is what the term specifically denotes. Reconnaissance and scanning are steps used by attackers to gather information or identify vulnerabilities; they don’t describe the assurance of protecting CIA and authenticity. A Information Security Management Program is related to organizing security activities, but it’s more about program management than the explicit concept of ensuring CIA and authenticity across all stages of information handling.

Information Assurance is the practice of ensuring that information and information systems remain trustworthy by preserving confidentiality, integrity, availability, and authenticity throughout usage, processing, storage, and transmission. It combines policies, risk management, governance, and security controls to provide confidence that data is protected against unauthorized access, alteration, or disruption while still being accessible to authorized users. This broader, ongoing assurance across the information lifecycle is what the term specifically denotes.

Reconnaissance and scanning are steps used by attackers to gather information or identify vulnerabilities; they don’t describe the assurance of protecting CIA and authenticity. A Information Security Management Program is related to organizing security activities, but it’s more about program management than the explicit concept of ensuring CIA and authenticity across all stages of information handling.