CISSP Practice Question: A financial firm requires legal proof that a specific executive authorized a…

Correct Answer: B. Non-repudiation

Explanation (CISSP Manager Logic):

From a managerial and legal perspective, non-repudiation ensures that a party cannot deny the authenticity of their signature or a document they originated. While authentication proves identity at the time of access, non-repudiation provides the needed evidence to hold an individual accountable for a specific action in a legal context.

By implementing non-repudiation, you:

• Provide legally defensible evidence of an action
• Ensure high-level accountability for critical business transactions
• Link a specific identity to a specific transaction timestamp and content

While the other options are relevant, they fall short because:

• A: Authentication only verifies the identity of the user at login, but doesn't necessarily bind them to a specific future action in a legally binding way.
• C: Availability ensures systems are up but has no bearing on the validity or origin of a specific transaction.
• D: Integrity ensures the data wasn't changed in transit, but it does not prove *who* sent the data.

Think like a manager:

Managers must look beyond technical verification and focus on liability and legal accountability. Non-repudiation is the bridge between technical identity and business responsibility.