System Integrity & Availability

RA 10173 requires organizations to implement reasonable and appropriate organizational, physical, and technical measures intended to protect personal data against accidental or unlawful destruction, alteration, and unauthorized access.

System integrity refers to maintaining the accuracy, consistency, and completeness of personal data, while availability ensures the data remains continuously accessible and usable for authorized processing when needed.

While the law is technology-neutral, it mandates reasonable and appropriate technical safeguards to ensure availability. Industry best practices require automated, regular, and securely stored backups capable of restoring operations.

Organizations protect availability by deploying highly redundant infrastructure, maintaining regular and isolated data backups, implementing disaster recovery plans, and utilizing technical anti-interference tools like DDoS mitigation.

Key technical controls include encryption, network firewalls, automated vulnerability scanning, strict access control mechanisms, malware protection, and automated secure backup systems.

Yes, the mandate to safeguard data availability and protect computer networks against disruptive interference implicitly requires formal disaster recovery and business continuity plans to ensure rapid restoration of operations.

Companies must deploy robust perimeter defenses, intrusion prevention systems, file integrity monitoring, and advanced anti-malware solutions to swiftly detect and block malicious traffic or unauthorized system alterations.

Auditors will look for backup configuration settings, historical disaster recovery testing records, system uptime and SLA reports, and formally approved business continuity policy documents.

While the law generally mandates 'regular assessment', aligning with industry standard security practices requires organizations to physically test data backups and recovery procedures at least quarterly or annually.

Reasonable and appropriate safeguards are security controls precisely tailored to address the specific risks of the processing, the sensitivity of the personal information, the size of the organization, and current industry standards.

Availability controls are only useful for compliance when they are consistently documented and reviewable. Tools like WatchDog Security's Compliance Center can help map backup configurations, disaster recovery tests, uptime reports, and related evidence to the relevant RA 10173 control requirements.

System integrity and availability can be weakened by cloud misconfigurations, exposed services, missing protections, or insecure infrastructure settings. Tools like WatchDog Security's Posture Management can help detect these issues across environments and provide remediation guidance before they affect personal data systems.