Explain how integrity differs from confidentiality, and describe two controls from the lesson that can help protect integrity.

### Why this is right Integrity asks whether information is accurate and has been changed only as permitted. Confidentiality asks whether information has been kept from unauthorized viewing or disclosure. Need-to-know permissions and separation of duties limit opportunities for improper changes, while hashes can reveal whether data differs from an expected value. ### The concept **Integrity** means that data remains correct, complete, consistent, and trustworthy through its lifecycle. **Confidentiality** is different: it controls who can see information. A system may preserve confidentiality while still having incorrect data, or preserve integrity while allowing too many people to view the data. A **hash** is a compact value calculated from data; comparing a received file's hash with a trusted expected hash can reveal a change. A backup provides a prior copy that may be restored after damaging changes, although it does not itself prevent those changes. Encryption can make data harder to read or alter, but it is not a substitute for checking integrity. ### What a good answer covers - Defines integrity as accuracy and authorized change, and distinguishes it from confidentiality. - Names two relevant controls and explains how each supports integrity. - Does not claim that encryption alone proves data has not changed. ### Terms - **Integrity**: The property that information is accurate, complete, consistent, and changed only as authorized. - **Confidentiality**: Protection from unauthorized viewing or disclosure. - **Separation of duties**: Dividing responsibility for a process so one person or process does not control it from beginning to end. - **Hash**: A compact value calculated from data that can be compared to help detect changes. ### Remember Confidentiality concerns who can see data; integrity concerns whether the data can be trusted.