Exam CIPT topic 1 question 82 discussion

Option C correctly aligns with the CIA framework: Confidentiality (privacy): Disclosure of data relates directly to confidentiality - controlling who can access information and preventing unauthorized disclosure. This is the privacy component. Integrity (security): Modification of data maps to integrity - ensuring data remains accurate and unaltered by unauthorized parties. Availability (security): Damage or loss of data relates to availability - ensuring data remains accessible and usable when needed. Unauthorized use (security): While not explicitly part of the CIA acronym, unauthorized use crosses all three areas but particularly affects confidentiality and integrity. The SOX controls address all three components of the CIA triad: They protect confidentiality by controlling disclosure (privacy) They ensure integrity by preventing unauthorized modification They maintain availability by preventing damage or loss

A. Modification of data is an aspect of privacy; unauthorized use, disclosure, and damage or loss of data are aspects of security.