Knowledge / concepts acsc-glossary

Integrity

The record is what authorised people made it. Quiet alteration is still a breach.

CONFIDENTIALITYINTEGRITYAVAILABILITYCIAlose one, the system is already failing

Integrity means data is created, changed, or removed only by authorised people and processes. Checksums, signed updates, locked audit logs, and change control exist for this reason.

A ransomware encrypt is an integrity hit. So is a helpful intern pasting over the production spreadsheet. Intent is optional; the property still broke.

If you cannot tell who last wrote a file, you will not be able to tell a defender's story when you need one.

Fact source: ASD's ACSC glossary.