(ISC)2 Certified in Cybersecurity Practice Exam

What key security concept ensures that actions taken by users are kept under control to prevent abuse?

1. Accountability

2. Confidentiality

3. Integrity

4. Availability

The correct answer is: Accountability

Accountability is a critical security concept that involves tracking users' actions within a system to ensure adherence to policies and to prevent misuse. This principle is fundamental in maintaining security in a computing environment. By ensuring that users can be identified and held responsible for their actions, organizations can deter malicious behavior and promote ethical use of resources. When accountability measures are in place, every action taken by users—whether it's accessing files, modifying data, or executing operations—can be traced back to the specific user who performed it. This not only helps in fostering trust in the system but also aids in auditing, which is essential for compliance with regulations and policies. The other options highlight important aspects of security, but they serve different purposes. Confidentiality focuses on protecting information from unauthorized access, integrity ensures that data remains accurate and unaltered during storage and transmission, and availability guarantees that information and resources are accessible when needed. While all these concepts are essential for a holistic security posture, accountability specifically addresses the need to control and track user actions to prevent abuse.