In risk management, what role does availability play?

• A. Ensuring access when needed
• B. Preventing any kind of access
• C. Only protecting data in transit
• D. Eliminating all backups

Answer: (A)

Availability in risk management is about keeping systems, data, and services accessible to authorized users whenever they need them. It means designing for uptime and user access even when something goes wrong, through redundancy, failover, regular backups, and tested disaster recovery plans. The goal is that outages or incidents don’t block legitimate users from getting to the resources they rely on.

Blocking access entirely would defeat availability, since the point is to ensure access rather than prevent it. Protecting data only in transit speaks to confidentiality and integrity during transmission, not the ongoing ability to access resources. Eliminating backups removes a key recovery option, which directly undermines availability by making it harder to restore access after an incident.