Question 1
The Chief Information Security Officer (CISO) at NovaHealth is reviewing the hospital's network video surveillance system. During a recent incident, an unauthorized user accessed a camera feed located in the HR department, viewing sensitive employee records displayed on a monitor. Which core principle of the CIA Triad was directly compromised in this scenario?
Answer and explanation
Correct answer: C
Confidentiality is the principle that ensures information is not disclosed to unauthorized individuals, entities, or processes. In this scenario, an unauthorized user viewing sensitive HR records via a camera feed represents a breach of confidentiality. Integrity refers to the accuracy and completeness of data, while availability ensures data is accessible when needed.