What does information security entail in C2?

• A. Encrypting all data at rest only.
• B. Relying on security by obscurity.
• C. Protecting hardware physically only.
• D. Protecting integrity, confidentiality, and availability of information and networks; includes encryption, access control, and cyber defense.

Answer: (D)

Information security in C2 means safeguarding the information and the networks that support commanders so that data remains confidential, unaltered, and available when needed. It rests on the CIA triad—confidentiality, integrity, and availability—and translates into practical measures like encryption for data at rest and in transit, access control to ensure only authorized users can view or modify data, and proactive cyber defense to detect, prevent, and respond to threats. While protecting hardware is part of the overall security posture, information security is not limited to physical protection, and it does not rely on obscurity as a defense. This creates a comprehensive, multilayer approach that protects information and networks through the core aspects of confidentiality, integrity, and availability, using encryption, access control, and cyber defense.