What it means
Integrity is about information and systems remaining correct for their intended purpose, with changes made through authorized processes. An unauthorized alteration, an accidental truncation, or a faulty calculation can each undermine integrity. Security teams therefore examine both malicious manipulation and ordinary processing failures.
A useful design identifies who may change information, how changes are validated, and how the organization can detect and recover from an incorrect result. Hashes can help identify changed bytes when compared with a trusted reference, but they do not prove that the original information was true. Business checks and trusted change records remain important.
AN ILLUSTRATIVE SCENARIO
A food manufacturer recipe file
A food manufacturer uses a controlled recipe file to set production quantities. An operator notices that one ingredient value differs from the approved version. The team stops the affected change process, compares the file with a trusted approved copy, and reviews the change record. It investigates whether the difference came from an authorized revision, an import mistake, or unauthorized editing. The file being readable and available does not establish that its values are suitable for production.
Put it to work
- Identify important records, calculations, and configurations, along with the approved process and people or systems allowed to change them.
- Use appropriate validation, access restrictions, versioning, and change records; protect reference copies and integrity-check values from the same unauthorized edits.
- Exercise a safe incorrect-change scenario with synthetic data and verify detection, investigation, and restoration to an approved state.
How to check your work
Trace a sample change from approval through implementation and verification. Confirm that the final value matches the authorized intent, that an unauthorized test change is caught, and that a trustworthy recovery copy is available.
Connect the ideas
- CIA triad
A shorthand for naming whether a loss is disclosure, unauthorized change, or downtime.
- Hashing
A one-way fingerprint of data used to detect change or store verifiers, not a reversible way to hide records you must later read.
- Audit trail
An append-oriented history of security-relevant actions that can be shown to a later reviewer.
- Backup
A copy of data kept so integrity and availability can be restored after loss, preferably beyond the production identity’s reach.