ISC2 Governance, Risk and Compliance (CGRC) Practice Question

Because the most damaging consequence for the payroll system would result from erroneous or manipulated salary data, the greatest risk lies in unauthorized modification of information. This directly threatens integrity-the assurance that data remain accurate, complete, and unaltered except by authorized actions. Although confidentiality and availability are important, the scenario states that disclosure has limited impact and recovery time is acceptable, so their impact levels can remain lower. Non-repudiation is a component of integrity but not one of the three core security objectives used for FIPS 199 categorization. Therefore, integrity must receive the highest impact rating.