A company discovers that a critical information system is unavailable to staff. Identify the most directly affected security goal and explain why detection and response still matter.

### Why this is right The stated harm is that authorized staff cannot access a needed system, which directly concerns availability. Detection and response remain relevant because the organization needs to identify the cause and limit the disruption. ### The concept Availability is one of the three security goals in the confidentiality, integrity, and availability model. A disruption may be caused by a cyberattack or another system problem, so identifying the threat or vulnerability is important. Response actions are intended to mitigate an incident's impact, including disruption to business activity. ### What a good answer covers - Identify availability as the directly affected goal. - Explain that availability concerns access by authorized users when needed. - Describe detection as finding the threat or vulnerability. - Describe response as action to mitigate the disruption. ### Terms - **Critical system**: A system important to an organization's operations. - **Vulnerability**: A weakness that could be exploited or otherwise cause a security problem. ### Remember An unavailable service is an availability issue, even if confidentiality is unaffected.