Which best describes IT Security?

Which best describes IT Security?

• A. The protection of information systems against unauthorized access to or unauthorized modification of information whether in storage, processing or transit, and against the denial of service to authorized users, including those measures necessary to detect, document and counter such threats
• B. Recovery activities after disaster
• C. Isolation of central office
• D. Loss of service to a PSAP

Answer: (A)

IT security is protecting information systems from threats that could compromise confidentiality, integrity, or availability of data, no matter where the data resides—at rest, in processing, or in transit—and it includes measures to detect, document, and counter those threats. This broad scope captures the essential goal: keep information safe from unauthorized access or modification and ensure services remain available to those who are authorized. The other options describe important related activities but don’t define the full concept: disaster recovery focuses on restoring operations after a disruption; isolating a central office is a physical or network design action rather than the overarching security concept; and loss of service to a PSAP is a potential impact, not the definition of IT security itself.

IT security is protecting information systems from threats that could compromise confidentiality, integrity, or availability of data, no matter where the data resides—at rest, in processing, or in transit—and it includes measures to detect, document, and counter those threats. This broad scope captures the essential goal: keep information safe from unauthorized access or modification and ensure services remain available to those who are authorized. The other options describe important related activities but don’t define the full concept: disaster recovery focuses on restoring operations after a disruption; isolating a central office is a physical or network design action rather than the overarching security concept; and loss of service to a PSAP is a potential impact, not the definition of IT security itself.