Data security is the overarching discipline and set of countermeasures specifically concerned with protecting data against the exact threats named in the question: unauthorized access (confidentiality), unauthorized deletion or disruption (availability), and unauthorized modification (integrity). Encryption, access controls, firewalls, monitoring, and related technical and procedural safeguards collectively fall under this umbrella, making 'data security' the accurate, comprehensive term for the countermeasure category the question describes, since it directly addresses all three named threat categories together. Data sovereignty (A) refers to the principle that data is subject to the laws and governance requirements of the country or jurisdiction in which it is physically stored or processed, a legal and regulatory concept concerned with jurisdictional control, not a technical countermeasure against access, deletion, modification, or disruption. Data locality (B) similarly refers to where data physically resides, often for performance, latency, or regulatory reasons, and does not describe a protective countermeasure against the threats listed. Data governance (C) is the broader organizational framework of policies, roles, and processes that oversee how data is managed, classified, and used across its lifecycle, which can incorporate security requirements but is itself a governance and oversight function rather than the specific protective countermeasure against unauthorized access, deletion, modification, or disruption. Data security is correct.
Reference topic: Securing the Data Protection Environment - Defining Data Security.
