Which of the following best describes the primary objective of cybersecurity?

The primary objective of cybersecurity is the protection of information assets from threats to their confidentiality, integrity, and availability (the CIA triad). Preventing unauthorized access is a cornerstone of this objective. It directly supports confidentiality by stopping unauthorized viewing of data and integrity by preventing unauthorized modification. While cybersecurity encompasses many activities, its fundamental goal is to safeguard an organization's critical information and the systems that process it. All other activities, such as regulating user behavior or securing protocols, are means to achieve this primary objective.

A. To protect the effective performance of IT general and application controls. - Protecting controls is a part of cybersecurity, but the ultimate objective is to protect the information assets that the controls themselves are designed to safeguard.
B. To regulate users' behavior it the web and cloud environment. - This is a component of a cybersecurity program (e.g., through policies and training), but it is not the overarching primary objective.
D. To secure application of protocols and authorization routines. - This describes a specific technical method or tactic used within cybersecurity; it is a "how," not the primary "why" or objective.

1. National Institute of Standards and Technology (NIST), "Framework for Improving Critical Infrastructure Cybersecurity," Version 1.1, April 16, 2018, p. 7. The framework's core functions (Identify, Protect, Detect, Respond, Recover) are all oriented toward managing cybersecurity risk to systems, assets, data, and capabilities. The "Protect" function explicitly includes "Access Control."

2. Stallings, W., & Brown, L., "Computer Security: Principles and Practice," 4th ed., Pearson, 2018, Chapter 1, "Overview." The text defines computer security's objective as protecting assets, centered on the CIA triad, with preventing unauthorized access being fundamental to confidentiality and integrity.

3. Von Solms, R., & van Niekerk, J., "From information security to cyber security," Computers & Security, Vol. 38, October 2013, pp. 97-102. This academic article discusses the evolution of the term, clarifying that cybersecurity's core remains the protection of assets in cyberspace, with a focus on preventing unauthorized activities. DOI: https://doi.org/10.1016/j.cose.2013.04.004