PII Security Assessment Verification
Which security assessment of IT systems verifies that PII data is available, accurate, confidential, and accessible only by authorized users?
Community Insight
The question defines the core tenets of Information Assurance; candidates must distinguish IA from broader risk or attack frameworks.
This question tests the definition of Information Assurance (IA) as the comprehensive practice ensuring PII is available, accurate, confidential, and accessible only to authorized users. The correct answer is A.
Candidates often select Risk Framing because it involves assessing data risks, but Risk Framing focuses on establishing the context for risk management rather than directly verifying operational security attributes like availability and confidentiality.
Community Discussion (1 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Information Assurance (IA) is defined as the set of measures that ensure information and information systems are protected from unauthorized access, use, disclosure, disruption, modification, or destruction. It explicitly covers the five pillars: availability, integrity (accuracy), authentication, confidentiality, and non-repudiation. Since the question describes verifying these exact states for PII, IA is the correct assessment type.Why the Other Options Are Wrong
Cyber Kill Chain is a model for identifying stages of a cyberattack, not a security assessment of system status. Workflow management refers to business process automation and has no direct relation to security verification. Risk framing is the initial step in NIST's risk management framework where scope and context are defined; it does not involve the active verification of data attributes like accuracy or confidentiality.Community Comment Notes
As Roattana noted in the comments, IA ensures "availability, integrity... confidentiality" which matches the prompt perfectly. The community consensus correctly identifies this foundational concept.Exam Strategy
Focus on memorizing the specific definitions of Information Assurance versus general risk management terms. When you see keywords like 'accurate', 'confidential', and 'accessible only by authorized users', think of the CIA triad plus integrity and availability.
Frequently Asked Questions
How is Information Assurance different from Risk Framing?
Risk framing sets the context for managing risk, while IA is the actual practice of protecting data attributes like confidentiality and integrity.
Does Cyber Kill Chain verify data security?
No, the Cyber Kill Chain is an offensive model describing attack stages, not a defensive assessment tool for verifying data state.