ISO/IEC 27001 focuses on the core principles of the CIA triad:

•Confidentiality: Ensuring information is accessible only to authorized individuals.

•Integrity: Maintaining the accuracy and completeness of information, protecting it from unauthorized modification.

•Availability: Information should be accessible to authorized users when needed (this is also important, but not one of the choices in this specific question).

References:

•ISO/IEC 27001:2022, Section 4.2 (Understanding the needs and expectations of interested parties): This section highlights the importance of determining relevant interested parties and their requirements related to information security, which includes addressing confidentiality, integrity, and availability.

•PECB Candidate Handbook, ISO/IEC 27001 Lead Auditor: This handbook often emphasizes the foundational role of the CIA triad within an effective Information Security Management System (ISMS).