CYBERSECURITY-AUDIT-CERTIFICATE practice question 6 of 25

What is the PRIMARY benefit of ensuring timely and reliable access to information systems?

Full set: 134 questions
Answer options
A: Improved data integrity
B: Consistent reporting functionality
C: Enhanced identity and access management
D: Increased data availability Correct answer
Correct Answer:
D. Increased data availability
Explanation

The primary benefit of ensuring timely and reliable access to information systems is increased data availability. Availability is one of the three core principles of the information security triad (Confidentiality, Integrity, and Availability - CIA). It is the guarantee that authorized users can access information and systems when needed for business purposes. This directly supports business operations, productivity, and continuity by preventing disruptions caused by inaccessible data or systems.

Why Incorrect

A. Improved data integrity refers to the accuracy and trustworthiness of data, which is a separate security goal from its accessibility.
B. Consistent reporting functionality is a specific outcome that depends on availability, but it is not the primary, foundational benefit itself.
C. Enhanced identity and access management (IAM) is the set of processes and technologies used to provide access, not the benefit of having that access.

References

1. ISACA, Cybersecurity Audit Certificate Study Guide, 2019, Chapter 1: Information Security and Cybersecurity Introduction, Section: The CIA Triad, p. 18. The guide explicitly defines availability as "ensuring timely and reliable access to and use of information."

2. ISACA, COBIT 2019 Framework: Governance and Management Objectives, 2018, APO13 Managed Security, p. 137. This section discusses the need to maintain the availability of information and services as a key security management practice.

3. Purdue University, The CERIAS TeXbook on Information Assurance and Security, Vol. 1, Chapter 1: Fundamental Concepts, 2017, p. 4. It defines availability as "the property of a system or a system resource being accessible and usable upon demand by an authorized system entity."

Scroll to Top