TheCCST Cybersecuritystudy material definesInformation Assurance (IA)as the practice of managing information-related risks to ensure data availability, integrity, confidentiality, authentication, and non-repudiation. It specifically applies to sensitive information like PII (Personally Identifiable Information).
"Information assurance involves the protection and validation of data so that it remains accurate, confidential, and available only to authorized users. IA ensures the trustworthiness of information, particularly when handling sensitive or regulated data such as PII."
(CCST Cybersecurity,Vulnerability Assessment and Risk Management, Information Assurance section, Cisco Networking Academy)
A(Risk framing) is part of risk management planning but does not verify data integrity and confidentiality directly.
B(Cyber Kill Chain) is an attack lifecycle model.
C(Workflow management) is about process efficiency, not data protection.
Dis correct: Information Assurance addresses the availability, accuracy, and confidentiality of sensitive data.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit