Which component of the CIA triad focuses on ensuring authorized users can access information when needed?

• A. Confidentiality
• B. Availability
• C. Integrity
• D. Authentication

Answer: (B)

Access for authorized users when they need it is about Availability. Availability in the CIA triad means keeping information and systems accessible and usable, with measures like redundancy, backups, fault tolerance, and disaster recovery so services remain up and can be restored quickly after any disruption. If systems go down or networks fail, access is denied even to those who are authorized, which defeats availability.

Confidentiality is about preventing unauthorized disclosure of information, ensuring data is not exposed to outsiders. Integrity focuses on data accuracy and trustworthiness, ensuring information isn’t altered improperly. Authentication is the process of verifying a user’s identity before granting access. While authentication is essential, the option here emphasizes ongoing access for legitimate users, which is the domain of Availability.