CIA stands for confidentiality, integrity, and availability. It helps in guiding the policies and practices of information security in an organization. Ideally, the Defense in Depth approach covers all of the three aspects of CIA triad. Let's go ahead and understand each of them.
The CIA triad
Confidentiality
As the name suggests, this function deals with keeping information confidential.
Thus, it is directly related to the principle of least privilege. This principle states that access to the information should be granted only on a need-to-know basis with a valid business requirement and thus should not be accessible to everyone.
For example, if a developer wants to see the application logs on the server, there is no...
