ITPEC FE Subject A April 2026 Question 29
In the context of information security defined by ISO/IEC 27000, which of the following is the property of accuracy and completeness of information assets?
Explanation
Integrity — ISO/IEC 27000 defines it as the property of accuracy and completeness.
The three core properties of information security in ISO/IEC 27000 are:
- •Confidentiality — information is not made available or disclosed to unauthorized individuals, entities or processes
- •Integrity — information is accurate and complete
- •Availability — information is accessible and usable on demand by an authorized entity
The standard adds further properties such as authenticity, accountability, non-repudiation and reliability.
Answer (d)
Why not others:
- •(a) Authentication — a process that verifies an identity; the related property in the standard is authenticity, meaning an entity is what it claims to be, not that data is accurate
- •(b) Availability — being accessible when needed, which says nothing about whether the data is correct
- •(c) Confidentiality — who may see the data, not whether it is correct
Key rule: Match the wording to the definition: "accurate and complete" is integrity, "accessible when needed" is availability, "not disclosed" is confidentiality.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.