An auditor is reviewing whether employees who accessed the HR database last month used that access only for approved purposes. This review is most closely related to the data security principle of _____.单项选择题
A
Integrity
B
Availability
C
Compliance
D
Confidentiality

Question

An auditor is reviewing whether employees who accessed the HR database last month used that access only for approved purposes. This review is most closely related to the data security principle of _____.单项选择题

A

Integrity

B

Availability

C

Compliance

D

Confidentiality

BlackTom AI · Accepted Answer

Integrity ensures that data are accurate, complete, and modified or used only in authorized ways, so...

1. Relevant knowledge points and concepts
- The core data security principles are Confidentiality, Integrity, and Availability (the CIA triad). Integrity covers protection against unauthorized alteration, misuse, or corruption of data and ensures actions are performed only by authorized users for approved purposes. Auditing, access logs, and activity reviews are typical integrity controls. "Compliance" is a governance/regulatory concern rather than a primary security property.

2. Complete reasoning process step by step
- The auditor’s task: verify that employees who accessed the HR database last month used that access only for approved purposes.
- This involves reviewing access logs, matching activity to job roles/approved tasks, and checking for unauthorized changes or misuse.
- Those actions detect whether data were altered inappropriately or whether users performed actions outside their authorization.

3. Intermediate steps (no numeric calculations required)
- Retrieve access logs for the relevant period.
- Map each user’s recorded actions to their authorized duties or approved purposes.
- Flag and investigate any discrepancies (e.g., a payroll change by a non-payroll employee).
- Determine whether any data were improperly modified or used.

4. Why the correct answer is correct
- This audit focuses on ensuring that data and system actions remain trustworthy and were used only as intended, which is the definition of integrity. Confirming authorized use and detecting unauthorized modification are classic integrity controls.

5. Why the other options are incorrect
- Confidentiality: Concerned with preventing unauthorized disclosure of data (who can see data), not primarily with whether access was used for approved purposes.  
- Availability: Relates to data/systems being accessible when needed (uptime, performance), not to appropriate use.  
- Compliance: A governance/regulatory category; audits can serve compliance goals, but the specific security principle being tested here is integrity, not the broader notion of regulatory compliance.

6. Conclusion
- The audit activity described is most closely related to the data security principle of Integrity, which matches the provided answer.

An auditor is reviewing whether employees who accessed the HR database last month used that access only for approved purposes. This review is most closely related to the data security principle of _____.单项选择题

类似问题

What are user permissions?

What are user permissions?

In order to achieve the system protection, a process should access

During an audit of an internally developed, web-based purchase approval application, an IS auditor discovers that all business users share a common access profile. Which of the following is the MOST important recommendation for the IS auditor to include in the report?

A company recently hired you as a system administrator. You notice that some accounts that were set up for temporary employees who are no longer working at the company are currently enabled. Which of the following is the BEST thing to do?

What are user permissions?

An employee, Alex, needs access to a critical database containing sensitive project files. Alex's role requires read-only access to specific project folders, not full control over the entire database. What security principle is most relevant?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单