IPA IP 2021 Question 67
A question IPA Japan published in 令和3年度 ITパスポート試験 公開問題 問67, translated into English. ITPEC is based on the same exams.
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning information security in ISMS?
Information security is the preservation of confidentiality, integrity and A of information. In addition, it may also involve the preservation of other properties, such as authenticity, accountability, non-repudiation, and B.
Explanation
A: availability, B: reliability — the definition of information security in ISO/IEC 27000, the vocabulary standard of ISMS.
ISO/IEC 27000 (JIS Q 27000 in Japan) defines information security as the preservation of the three core properties, the CIA:
- •Confidentiality: only authorized people can access the information
- •Integrity: the information is accurate and complete, not tampered with
- •Availability: authorized people can use the information whenever they need it
It adds that other properties, namely authenticity, accountability, non-repudiation and reliability, can also be involved. Reliability means the system and its processing behave consistently as intended.
Answer (a)
Why not others:
- •(b) — serviceability, how easily a system can be maintained (the S of RASIS), is a measure of system dependability, not one of the properties in the definition
- •(c) and (d) — maintainability, how easily a system can be restored or repaired, is likewise a dependability term; the third core property, beside confidentiality and integrity, is availability
Key rule: Information security is confidentiality, integrity and availability, extended by authenticity, accountability, non-repudiation and reliability.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.