Which principle states that data are only changed by authorized individuals?

• A. Confidentiality
• B. Integrity
• C. Availability
• D. Non-repudiation

Answer: (B)

This principle focuses on keeping information accurate and trustworthy by ensuring only authorized individuals can modify it. When data must remain as it was intended and changes are traceable to those allowed to make them, integrity is the central idea. If someone without permission alters a record, the data’s integrity is compromised, which is exactly what this principle aims to prevent. In contrast, confidentiality is about preventing disclosures to unauthorized people, availability is about ensuring access when needed, and non-repudiation provides proof of who performed an action and prevents denial of that action. Safeguards like access controls, authentication, audit logs, checksums, and digital signatures support integrity by making changes deliberate, authorized, and verifiable.