Skip to content

Data Integrity

What is Data Integrity?

The assurance that data is accurate, complete, consistent, and unaltered throughout its lifecycle, whether at rest, in transit, or in processing.

Information Security

Terms that appear alongside data integrity

Each of these is named in at least one of the same controls as data integrity. The number is how many controls name both.

Frameworks that govern data integrity

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on data integrity

Requirements naming data integrity across 6 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications8 controls

Security Dimension 6 Data Integrity per X.805 Clause 6.6: Data Integrity keeps data correct and accurate. Data are shielded from being altered, deleted, created or copied without authorization, and any such unauthorized activity is made detectable.

X805-Dim6-Data-Integrity-Correctness-Accuracy-Unauthorized-Modification-Deletion-Detection · ITU-T X.805 Security Dimension 6 - Data Integrity + Correctness + Accuracy + Unauthorized Modification Prevention + Deletion Detection + Hashing + HMAC + Digital Signatures + Merkle Trees + Blockchain Integrity + File Integrity Monitoring (FIM) →
ICH E6(R3) - Good Clinical Practice3 controls

ICH E6(R3) Annex 1 (Computer Systems Used in Clinical Trials) is the new section consolidating data integrity + electronic systems + computer system validation (CSV) - replacing scattered E6(R2) provisions.

ICH-E6-Annex1-ElectronicSystems-CSV-eSig-Audit-ALCOA-DataIntegrity · ICH E6(R3) Annex 1 - Computer Systems + Computer System Validation (CSV) + Electronic Signature + Audit Trail + ALCOA+ Data Integrity →
Malaysia PDPA 20103 controls

To keep data accurate, complete, not misleading and current, the data controller must provide data subjects with an update form online or conventionally; update data promptly on receiving a correction notice;

malaysia-pdpa-2010::STD-7 · Standard 2015 para. 7: data integrity standard (update forms, prompt correction, supporting documents, notification of updates) →
NIST SP 800-53 Rev 53 controls

Establish a Data Integrity Board to: a. Review proposals to conduct or participate in a matching program; and b. Conduct an annual review of all matching programs in which the agency has participated.

NIST800-PM-24 · PM-24 Data Integrity Board →
Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue2 controls

The organisation establishes a data integrity board to review proposals to conduct or join matching programs and to review annually all matching programs it took part in.

canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::PM-24 · PM-24 Data integrity board →
CCSDS 350.0-G-3 - Space Communications Security (Consultative Committee for Space Data Systems)1 control

350.0-G-3 sec.4.3: integrity mechanisms to detect unauthorised or accidental modification of data in transit.

CCSDS350-4.3 · Data Integrity →

Questions people ask about data integrity

What is Data Integrity?
The assurance that data is accurate, complete, consistent, and unaltered throughout its lifecycle, whether at rest, in transit, or in processing.
Why is Data Integrity important for compliance?
Data Integrity is a key concept in Information Security. Understanding data integrity helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Data Integrity?
Data Integrity appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, ICH E6(R3) - Good Clinical Practice, Malaysia PDPA 2010, NIST SP 800-53 Rev 5, Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue. Across these standards we have identified 20 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Data Integrity?
Explore our compliance framework pages to see how data integrity applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Data Integrity applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.