Which of the following are the security objectives under FISMA?

Which of the following are the security objectives under FISMA?

• A. Confidentiality, Integrity, Authentication
• B. Confidentiality, Integrity, Availability
• C. Ownership, Integrity, Availability
• D. Integrity, Impact, Availability

Answer: (B)

The correct answer focuses on the well-established security objectives of information security as outlined under the Federal Information Security Management Act (FISMA). The three key concepts are confidentiality, integrity, and availability, often referred to as the CIA triad. Confidentiality ensures that sensitive information is accessed only by authorized individuals, protecting against unauthorized disclosure. Integrity ensures that the data is accurate and has not been tampered with or altered unexpectedly. Availability guarantees that information and resources are accessible to authorized users when needed, ensuring operational continuity. These principles serve as a foundational framework for developing and implementing effective information security programs in federal agencies, aligning with the requirements established by FISMA. Understanding these objectives helps in assessing and managing risks associated with information systems, ultimately guiding organizations in creating secure and resilient environments. While the other options introduce terms that are relevant to information security, they do not accurately represent the established security objectives defined under FISMA. For example, authentication is an important aspect of security but is not considered one of the core security objectives. Similarly, ownership and impact are relevant concepts in information management but do not encapsulate the foundational goals of maintaining secure and reliable information systems as properly outlined by FISMA.

The correct answer focuses on the well-established security objectives of information security as outlined under the Federal Information Security Management Act (FISMA). The three key concepts are confidentiality, integrity, and availability, often referred to as the CIA triad.

Confidentiality ensures that sensitive information is accessed only by authorized individuals, protecting against unauthorized disclosure. Integrity ensures that the data is accurate and has not been tampered with or altered unexpectedly. Availability guarantees that information and resources are accessible to authorized users when needed, ensuring operational continuity.

These principles serve as a foundational framework for developing and implementing effective information security programs in federal agencies, aligning with the requirements established by FISMA. Understanding these objectives helps in assessing and managing risks associated with information systems, ultimately guiding organizations in creating secure and resilient environments.

While the other options introduce terms that are relevant to information security, they do not accurately represent the established security objectives defined under FISMA. For example, authentication is an important aspect of security but is not considered one of the core security objectives. Similarly, ownership and impact are relevant concepts in information management but do not encapsulate the foundational goals of maintaining secure and reliable information systems as properly outlined by FISMA.