(ISC)2 Certified in Cybersecurity Practice Exam

For which system is the security concept of availability probably most important?

1. Medical systems that store patient data

2. Retail records of past transactions

3. Online streaming of museum camera feeds

4. Medical systems that monitor patient conditions in ICU

The correct answer is: Medical systems that monitor patient conditions in ICU

The security concept of availability is critical for systems that require constant operation and immediate access to data to ensure the safety and well-being of individuals. In the case of medical systems that monitor patient conditions in an Intensive Care Unit (ICU), the timely access to real-time data is imperative. These systems must function without disruption because they provide vital information about a patient's health status, which can directly influence medical decisions and interventions. If the system becomes unavailable due to downtime or disruption, it could lead to severe consequences, including a patient's deterioration or even loss of life. In contrast, while availability is important for the other systems mentioned, the impact of unavailability is far less critical. For instance, medical systems storing patient data need to ensure confidentiality and integrity as well, but a temporary downtime may not have an immediate life-or-death impact. Retail records of past transactions, while important for business operations and customer service, do not have the same urgency as monitoring active medical patients. Online streaming of museum camera feeds may provide valuable educational content, but the consequences of downtime would not endanger anyone's life. Thus, the urgency tied to monitoring patient conditions in an ICU makes availability the paramount concern for that system.