What Is Availability?
How Does Availability Ensure That Information and Services Remain Accessible?
Availability is a security service that ensures information, communication systems, and network resources remain accessible and operational for authorised users whenever they are needed. A system that is unavailable cannot provide its intended service, regardless of how well it protects the confidentiality or integrity of its data. Availability is therefore one of the three fundamental objectives of information security, alongside confidentiality and integrity.
The basic principle is straightforward. Communication systems are designed to continue operating despite equipment failures, software faults, cyberattacks, power interruptions, or other disruptive events. This is achieved by identifying potential single points of failure and implementing measures that either prevent outages or allow services to recover quickly when failures occur.
A useful analogy is a hospital's emergency power system. Even if the main electricity supply fails, backup generators automatically provide power so that critical medical equipment continues operating. Similarly, communication systems employ backup resources and fault-tolerant designs to ensure that essential services remain available during unexpected failures.
Availability is achieved through a combination of engineering and operational techniques. These include redundant hardware, backup communication links, uninterruptible power supplies (UPSs), standby generators, fault-tolerant system architectures, automatic failover mechanisms, regular data backups, and geographically separated data centres. Network operators also monitor system performance continuously so that developing faults can often be detected and corrected before they result in service interruptions.
Cybersecurity also plays an important role in maintaining availability. One of the most common threats is the Denial-of-Service (DoS) attack, in which an attacker attempts to overwhelm a system with excessive traffic or processing requests, preventing legitimate users from accessing the service. A larger-scale version, known as a Distributed Denial-of-Service (DDoS) attack, uses thousands or even millions of compromised devices to generate the attack traffic. Firewalls, traffic filtering, rate limiting, load balancing, and cloud-based DDoS mitigation services are commonly used to protect against these threats.
It is important to distinguish availability from reliability. Reliability describes the likelihood that a system will continue operating without failure over a specified period, whereas availability measures the proportion of time that a service is actually accessible to users. A highly reliable system generally exhibits high availability, but rapid repair and recovery mechanisms can also improve availability following failures. Likewise, availability differs from confidentiality and integrity, which protect information from disclosure and modification rather than ensuring continued access.
Back to reading