Which of the following best defines information security?

Information security primarily revolves around safeguarding the confidentiality, integrity, and availability of information. This includes implementing measures to protect sensitive data from unauthorized access, disclosure, alteration, or destruction. Therefore, the definition that highlights the preservation of confidentiality aligns closely with the fundamental principles of information security.

In this context, confidentiality specifically refers to ensuring that sensitive information is accessed only by individuals who are authorized to view it. The focus is on establishing protocols, such as encryption and access controls, to maintain this level of protection. While there are other important aspects of security, only the option focusing on the confidentiality of owned information accurately encapsulates the core objective of information security efforts.

The other definitions, while related to security, address different areas. Protecting physical assets pertains to physical security or asset management, personal safety relates to individual security measures, and policies governing information flow are more about information governance than the security of the data itself.