What is meant by "compromise" in information security?

• A. Authorized access to data by a third party
• B. An instance of system updates without proper checks
• C. Disclosure of information to unauthorized persons
• D. An agreement for sharing data between organizations

Answer: (C)

In information security, the term "compromise" specifically refers to the unauthorized disclosure of information, which aligns with the selected answer. When a system or data is compromised, it means that sensitive or confidential information has been accessed or disclosed to individuals or entities that do not have permission to view it. This can happen through various means, such as hacking, phishing, or insider threats, leading to potential data breaches that can have serious implications for organizations and individuals.

The other options do not accurately capture the essence of a compromise in the context of information security. Authorized access, for instance, implies that permissions are in place, which is contrary to the notion of a compromise. Similarly, system updates without proper checks may lead to vulnerabilities but do not inherently signify a breach of data confidentiality. Finally, an agreement for sharing data pertains to controlled and consensual disclosure rather than unauthorized access, which is not consistent with the definition of compromise. Thus, the understanding of compromise as unauthorized information disclosure is critical for identifying and mitigating security risks.