A public-health clinic must protect ePHI confidentiality and keep the after-hours nurse line available. What should the analyst tell leadership about this CIA trade-off?
Select an answer to reveal the explanation.
Short Explanation
The clinic cannot pick a favorite child between keeping charts private and keeping the night nurse reachable. Say both stay on the board, then use ES to watch for leaks and for the line going dark. CIA is a balance, not a hall pass to ignore one side.
Full Explanation
Information assurance requires explicit CIA trade-offs rather than declaring one principle optional. A public-health clinic must protect ePHI confidentiality and preserve availability of the after-hours nurse line; both remain in scope. Enterprise Security can monitor disclosure-oriented and outage-oriented detections so leadership sees both sides instead of a single-principle shortcut.