Which list contains the information security goals that should be achieved by an e-commerce system for users and asset holders?

• A. Exactness, invulnerability, accuracy, materiality, and data/systems response
• B. Penetrability, accuracy, exactness, materiality, and systems reliability
• C. Confidentiality, integrity, availability, authentication, and non-repudiation
• D. Penetrability, accuracy, availability, authentication, and systems reliability

Answer: (C)

The essential idea here is to protect information and services across confidentiality, integrity, availability, authentication, and non-repudiation. For an e-commerce system, these goals translate into protecting customer data and payments (confidentiality), ensuring orders and transaction records are accurate and tamper-proof (integrity), keeping the site and services accessible when customers need them (availability), verifying who is using the system to prevent unauthorized actions (authentication), and providing verifiable evidence of who performed actions like purchases or changes (non-repudiation). This combination directly addresses both users and asset holders by guarding privacy, correctness, reliability, identity, and accountability. Other options include nonstandard terms or omit one of these critical elements, so they don’t fully capture the necessary security goals.