What are the primary goals for information system security?

The primary goals for information system security are best captured by confidentiality, integrity, and availability, collectively known as the CIA triad.

Confidentiality ensures that sensitive information is accessed only by authorized individuals, protecting data from unauthorized access. This is crucial for complying with regulations and maintaining trust with users and stakeholders.

Integrity refers to the accuracy and completeness of data. It ensures that information is not altered or destroyed in an unauthorized manner. Maintaining data integrity is essential for making informed decisions based on reliable information and preventing fraud.

Availability ensures that information and resources are accessible to authorized users when needed. This involves maintaining the infrastructure and systems that support data access and is critical for operational functionality.

Options that focus on reliability, trustworthiness, accessibility, monitoring, backups, redundancy, and efficiency cover aspects of information systems but do not encapsulate the essential security goals in the same foundational manner as the CIA triad does. These elements may contribute to a secure system but do not represent the core goals of security measures themselves.