Availability

Availability: The attribute of systems and data being usable when needed. This concept is part of the organizational management of information security. ResponsibilitiesResponsibilityAn explicitly assigned obligation to make, perform, or verify a security decision or task., mandatory requirements, measurable goals, evidence, and continuous improvement are essential components.

How it works and where it fits

Availability must be considered across the complete data lifecycle: creation, processing, transfer, storage, sharing, archiving, and deletion. Safeguards depend on sensitivity, legal obligations, business value, and potential harm. Copies, metadata, and derived information may carry the same or a different protection requirement.

Practical security relevance

In practice, this calls for classification, governed access, suitable encryption, and traceable retention periods. Data flows and storage locations should be inventoried across cloud services, backups, and test environments. Monitoring and loss prevention complement technical controls, but they do not replace data minimization or the secure deletion of information that is no longer required.

Related concepts

• ConfidentialityConfidentialityThe property ensuring that information is accessible only to authorized persons or systems.: The property ensuring that information is accessible only to authorized persons or systems.
• IntegrityIntegrityProperty ensuring that data is complete, accurate, and unaltered.: Property ensuring that data is complete, accurate, and unaltered.
• Business Continuity ManagementBusiness Continuity ManagementPlanning of measures to maintain critical business processes during disruptions.: Planning of measures to maintain critical business processes during disruptions.
• Denial of ServiceDenial of ServiceCompromises the availability of a service through overloading or resource consumption.: Compromises the availability of a service through overloading or resource consumption.