Which concept denotes preserving authorized restrictions on information access and disclosure, aimed at ensuring information is accessible by authorized users when needed?

• A. Availability
• B. Control
• C. Confidentiality
• D. Compliance

Answer: (A)

Availability focuses on making information accessible to authorized users when needed while keeping access restricted for those who aren’t authorized. It combines dependable access with defenses that prevent unauthorized disclosure, so systems stay usable even during outages or disruptions. This aligns with the idea of preserving authorized restrictions on access and disclosure, ensuring that the right people can reach the data at the right time without exposing it to others.

Confidentiality centers on preventing unauthorized disclosure, which is part of the concept but does not by itself guarantee that authorized users can always access the information when they need it. Compliance deals with meeting laws, regulations, and policies, not the practical aspect of access. Control is a broader term referring to mechanisms that enforce policies, but it isn’t the formal property describing the balance of access and restriction that availability encapsulates.