Which statement defines Availability in the CIA triad?

Which statement defines Availability in the CIA triad?

• A. Ensuring information is accessible to authorized users when needed.
• B. Protecting data from being viewed.
• C. Repairing data after corruption.
• D. Encrypting data for storage.

Answer: (A)

Availability means keeping information and systems usable by those who are allowed to access them, exactly when they need to be. It focuses on minimizing downtime and ensuring reliable access, often through redundancy, backups, fault-tolerant design, monitoring, and rapid recovery from incidents. When these measures are in place, authorized users can reach the data or services without unnecessary delays, even during failures or high demand. The other ideas described relate to different aspects of the CIA triad. Protecting data from being viewed points to confidentiality, which is about preventing unauthorized access. Recalling or repairing data after corruption touches on integrity and recovery, ensuring data remains accurate and trustworthy. Encrypting data for storage is a protection mechanism primarily supporting confidentiality (and, to some extent, integrity) rather than guaranteeing ongoing access for authorized users.

Availability means keeping information and systems usable by those who are allowed to access them, exactly when they need to be. It focuses on minimizing downtime and ensuring reliable access, often through redundancy, backups, fault-tolerant design, monitoring, and rapid recovery from incidents. When these measures are in place, authorized users can reach the data or services without unnecessary delays, even during failures or high demand.

The other ideas described relate to different aspects of the CIA triad. Protecting data from being viewed points to confidentiality, which is about preventing unauthorized access. Recalling or repairing data after corruption touches on integrity and recovery, ensuring data remains accurate and trustworthy. Encrypting data for storage is a protection mechanism primarily supporting confidentiality (and, to some extent, integrity) rather than guaranteeing ongoing access for authorized users.