What security control ensures that an individual cannot deny having performed a particular action?

What security control ensures that an individual cannot deny having performed a particular action?

• A. AU-5 Response to Audit Processing Failures
• B. SC-13 Use of Cryptography
• C. A.12.2.3 Message integrity
• D. AU-10 Non-Repudiation

Answer: (D)

Non-repudiation refers to the assurance that someone cannot deny the validity of their actions, particularly in the context of digital communications and transactions. This control is crucial in establishing accountability, as it provides evidence that a specific individual performed a particular action, such as sending a message or altering a document. The concept of non-repudiation is often achieved through techniques such as digital signatures, which apply cryptographic methods to ensure that the origin of the data can be verified and that the content has not been altered in transit. This means that when an individual performs a specific action, they cannot later claim they did not do it, as there is a verifiable record tied to their identity that proves their involvement. In the context of the other options, while they relate to different aspects of security and auditing, they do not specifically address the principle of non-repudiation. Audit processing failures and message integrity focus more on ensuring data accuracy and reliability in auditing processes, but they do not inherently provide the mechanism to prevent denial of action by an individual. Therefore, non-repudiation stands out as the control that directly ensures accountability for actions taken by individuals.

Non-repudiation refers to the assurance that someone cannot deny the validity of their actions, particularly in the context of digital communications and transactions. This control is crucial in establishing accountability, as it provides evidence that a specific individual performed a particular action, such as sending a message or altering a document.

The concept of non-repudiation is often achieved through techniques such as digital signatures, which apply cryptographic methods to ensure that the origin of the data can be verified and that the content has not been altered in transit. This means that when an individual performs a specific action, they cannot later claim they did not do it, as there is a verifiable record tied to their identity that proves their involvement.

In the context of the other options, while they relate to different aspects of security and auditing, they do not specifically address the principle of non-repudiation. Audit processing failures and message integrity focus more on ensuring data accuracy and reliability in auditing processes, but they do not inherently provide the mechanism to prevent denial of action by an individual. Therefore, non-repudiation stands out as the control that directly ensures accountability for actions taken by individuals.