Rotating encryption keys after a security incident is most closely linked to which security concept?

Key rotationis a core practice to maintainConfidentialityin cryptographic systems. After a security incident—especially if a key might have been compromised—rotating encryption keys prevents unauthorized access to sensitive data by invalidating old keys and introducing new ones.

Confidentialityensures information is accessible only to authorized parties, which key rotation supports by reducing the risk of key compromise.

Integrityrelates to the accuracy and trustworthiness of data, not directly key rotation.

Obfuscationrefers to making data less intelligible but is distinct from cryptographic confidentiality.

Availabilityrefers to ensuring timely access to resources.

Splunk’s cybersecurity analyst training and NIST guidelines recommend key rotation as a standard practice to uphold confidentiality and minimize cryptographic risk post-incident.