The CIA Triad
The CIA Triad is a fundamental cybersecurity model that stands for Confidentiality, Integrity, and Availability.
It helps ensure secure handling of data by protecting it from unauthorized access, tampering, and downtime.
Learn how each component of the CIA Triad strengthens information security.
1: Confidentiality
- Roughly but wider than privacy.
- Sensitive data should not reach the wrong people.
- Sensitive data should reach the right people.
Measures:
- Data encryption.
- Authentication (maybe multi-factor).
- More sensitive, more physical.
Integrity
- Data should be consistent, trustworthy, and accurate.
- Data must not change in transit.
- Most complex to implement.
Measures:
- Backups.
- Cryptographic measures (checksums).
- Access control.
Availability
- Data should be available as and when needed.
- Updated software and hardware.
Measures:
- Firewall rules.
- Patch management and disaster recovery.
- Load balancers.