Scenario 1: HealthGenic is a pediatric clinic that monitors the health and growth of individuals from
infancy to early adulthood using a web-based medical software. The software is also used to
schedule appointments, create customized medical reports, store patients' data and medical history,
and communicate with all the [^involved parties, including parents, other physicians, and the
medical laboratory staff.
Last month, HealthGenic experienced a number of service interruptions due to the increased
number of users accessing the software Another issue the company faced while using the software
was the complicated user interface, which the untrained personnel found challenging to use.
The top management of HealthGenic immediately informed the company that had developed the
software about the issue. The software company fixed the issue; however, in the process of doing so,
it modified some files that comprised sensitive information related to HealthGenic's patients. The
modifications that were made resulted in incomplete and incorrect medical reports and, more
importantly, invaded the patients' privacy.
In scenario 1, HealthGenic experienced a number of service interruptions due to the loss of
functionality of the software. Which principle of information security has been affected in this case?