Integrity
The record is what authorised people made it. Quiet alteration is still a breach.
Integrity means data is created, changed, or removed only by authorised people and processes. Checksums, signed updates, locked audit logs, and change control exist for this reason.
A ransomware encrypt is an integrity hit. So is a helpful intern pasting over the production spreadsheet. Intent is optional; the property still broke.
If you cannot tell who last wrote a file, you will not be able to tell a defender's story when you need one.
Fact source: ASD's ACSC glossary.
