Domain 1 · Objective reference 1.2 · Chapter 2 of 62
Security properties and their relationships
About 5 minutes · Current ISC2 outline effective 15 April 2024; the announced 15 April 2027 replacement requires separate mapping
Session only. Enable saving or download a backup from this course’s hub.
Completion is self-reported and does not certify understanding.
See it · Try it · Recall it
Picture the topic
Remember this: Security properties can fail independently.
Explore the anchors
Limit improper disclosure.
Concept matching activity
Match this task or description to its concept:
Protect against improper change.
Choose a concept before checking the explanation.
A quick way to study this topic
- Hide the explanation and redraw these three anchors from memory.
- Explain the difference between the anchors in your own words.
- Apply the distinction to the worked example below. Check the full lesson for assumptions and exceptions.
- Recall it again tomorrow, then after a few days. A memory hint is a retrieval cue, not a replacement for understanding.
Original academy illustrations and fictional exercises. These are learning simulations, not a real virtual machine, network assessment or measure of job readiness. Activities reset when you leave or reload; they do not change quiz scores.
What this chapter explains
- Concepts and mechanisms
- Design, evidence and tradeoffs
Concepts and mechanisms
Confidentiality limits unauthorized disclosure, integrity protects against improper change and availability supports authorized use. Authenticity concerns a claim of origin or identity; non-repudiation concerns trustworthy attribution evidence. These properties interact but can fail independently. An encrypted archive can preserve confidentiality while becoming unavailable through lost keys. A signature can support integrity and origin verification without making the content confidential or factually correct.
Design, evidence and tradeoffs
Select a control for the property and scenario. Authorization limits permitted actions, encryption protects selected data states, verification can detect change and tested recovery supports restoration. The strength of one mechanism does not remove dependencies such as key custody, access administration or trustworthy endpoints. In AI-supported services, data poisoning is an integrity concern, model theft can affect confidentiality and unavailable inference dependencies can interrupt service.
Worked example
A document is signed and publicly distributed. Recipients validate origin and integrity; confidentiality is not a claimed property of the public copy.
Check your understanding
Does a valid signature establish that every statement is true?
Show explanation
No. It can support origin and integrity under a trust model, not the truth or wisdom of the signed statements.
Source and study boundary
Official syllabus source. The reference identifies the topic being taught. Explanations and examples are original academy material; a topic link does not establish independent approval or sufficient exam mastery.