What does AU-10 Non-Repudiation primarily address in information security?

What does AU-10 Non-Repudiation primarily address in information security?

• A. Data confidentiality
• B. Data integrity
• C. Accountability of actions
• D. Authorization processes

Answer: (C)

AU-10 Non-Repudiation primarily addresses the accountability of actions in information security. Non-repudiation ensures that an individual cannot deny the validity of their actions or the delivery of information within a system. This is crucial for establishing accountability and trust in electronic transactions or communications. When a system provides non-repudiation, it means that there are mechanisms in place—such as digital signatures and audit logs—that create evidence which can be used to confirm that an action was performed by a specific person or entity. This evidence makes it difficult for a user to refute or deny their responsibility for those actions. Non-repudiation is a critical aspect of broader information security practices. It helps in creating a structured approach to accountability, making it vital for compliance with various regulations and standards. This capability is particularly important in environments where actions may have legal implications, such as in financial transactions or sensitive data exchanges, ensuring that all parties are held accountable for their actions.

AU-10 Non-Repudiation primarily addresses the accountability of actions in information security. Non-repudiation ensures that an individual cannot deny the validity of their actions or the delivery of information within a system. This is crucial for establishing accountability and trust in electronic transactions or communications.

When a system provides non-repudiation, it means that there are mechanisms in place—such as digital signatures and audit logs—that create evidence which can be used to confirm that an action was performed by a specific person or entity. This evidence makes it difficult for a user to refute or deny their responsibility for those actions.

Non-repudiation is a critical aspect of broader information security practices. It helps in creating a structured approach to accountability, making it vital for compliance with various regulations and standards. This capability is particularly important in environments where actions may have legal implications, such as in financial transactions or sensitive data exchanges, ensuring that all parties are held accountable for their actions.