Which core principle of the CIA triad is primarily about ensuring data is accessible only to authorized parties?

• A. Confidentiality
• B. Integrity
• C. Availability
• D. Non-repudiation

Answer: (A)

Confidentiality is the principle that data should be accessible only to authorized parties. It focuses on preventing unauthorized disclosure through measures like authentication, access controls, encryption, and need-to-know policies. The question asks for keeping information private from those who shouldn’t see it, which is exactly what confidentiality addresses.

Integrity, on the other hand, deals with data accuracy and trustworthiness—making sure information isn’t altered in an unauthorized way. Availability is about ensuring information is accessible when needed, even during disruptions. Non-repudiation ensures a sender or signer cannot deny their involvement, typically using digital signatures and audit trails.