ISC2 Governance, Risk and Compliance (CGRC) Practice Question

The primary concern is the trustworthiness of the land records. If an attacker changes ownership data, the organization could face expensive litigation and loss of public confidence. That is a direct threat to integrity-assurance that information remains accurate and unaltered except by authorized actions. Confidentiality is less critical because the data are intentionally public, and availability is of lesser importance because temporary outages are tolerated. Non-repudiation is useful for later dispute resolution but is not one of the three core objectives used when categorizing impact under FIPS 199 or similar frameworks. Therefore, integrity must receive the highest impact rating so that appropriate controls (e.g., strong access control, tamper detection, robust audit) are selected to protect it.