Which of the following is NOT one of the three principles of information security?

• A. Confidentiality
• B. Protection
• C. Availability
• D. Accessibility

Answer: (D)

The three core principles of information security, often referred to as the CIA triad, include Confidentiality, Integrity, and Availability. Confidentiality ensures that sensitive information is only accessible to those who have the authority to view it, protecting data from unauthorized access. Integrity refers to the accuracy and trustworthiness of data, ensuring it is not altered or tampered with. Availability, on the other hand, ensures that information and resources are accessible to authorized users when needed, guaranteeing business continuity and operational effectiveness.

Accessibility, while related to these concepts, is not formally recognized as one of the key principles of information security. It often overlaps with availability but focuses on the ease of access to information, which does not encompass the full scope of protecting and managing information security. By recognizing the absence of accessibility as a formal principle, one can better understand the structure of security protocols and the importance of maintaining the integrity and availability of data without compromising confidentiality.