Accountability: The principle that individuals are held responsible for their actions within a system. In the context of a system, this involves tracking and recording user activities, often through auditing and logging mechanisms, so that actions can be traced back to the individual users who performed them. Accountability helps deter malicious activities, aids in incident response and forensic analysis, and ensures that users follow policies and procedures.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D1: Information Security governance | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D1: Security Concepts and Practices
Related Articles:
- Glossary: UK Corporate Governance Code (formerly known as the Combined Code)
- Glossary: Risk owner
- Glossary: Reporting in investigations
- Glossary: Parkerian Hexad
- Glossary: Office for Civil Rights (OCR)
- Glossary: Internal control environment
- Glossary: Individual accountability
- Glossary: Health Information Technology for Economic and Clinical Health Act (HITECH Act) (US)
- Glossary: Health Insurance Portability and Accountability Act (HIPAA) (US)
- Glossary: Government Information Security Reform Act of 2000