iSACA Cybersecurity Fundamentals Certification Practice Exam

Which of the following best describes availability in the context of cybersecurity?

1. Protection from unauthorized access

2. Prevention of unauthorized modification

3. Protection from disruptions in access

4. Protection of information assets

The correct answer is: Protection from disruptions in access

Availability in the context of cybersecurity refers to ensuring that information and resources are accessible to authorized users when needed. This concept is one of the core principles of the CIA Triad (Confidentiality, Integrity, Availability), which represents the essential objectives of information security. When discussing availability, the focus is on maintaining operational uptime and ensuring that systems and data can be accessed as required. This involves implementing measures that prevent disruptions due to various factors such as cyberattacks, equipment failures, or natural disasters. Thus, to maintain availability, organizations might invest in redundancy, disaster recovery planning, and robust infrastructure. Other options, while relevant to cybersecurity, do not adequately capture the essence of availability. Unauthorized access pertains to confidentiality, unauthorized modification relates to integrity, and protection of information assets encompasses all aspects of information security, not just the aspect of ensuring access when required.