PECB ISO-IEC-27001-Lead-Auditor Exam - Topic 3 Question 59 Discussion

These three characteristics are the fundamental properties of information security, as defined by the ISO/IEC 27000 standard, which provides the overview and vocabulary of information security, cybersecurity, and privacy protection12. They are also the basis for the information security objectives and controls of the ISO/IEC 27001 standard, which specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system34. The definitions of these characteristics are as follows12:

* Availability: The property of being accessible and usable upon demand by an authorized entity.

* Confidentiality: The property that information is not made available or disclosed to unauthorized individuals, entities, or processes.

* Integrity: The property of safeguarding the accuracy and completeness of information and processing methods.

The other characteristics listed in the question, such as clarity, accessibility, completeness, importance, and efficiency, are not directly related to information security, although they may be relevant for other aspects of information management, such as quality, usability, or performance.