The CIA triad
The CIA triad is at the core of information security. This model is used to help the information security professional think about how best to protect organizational data. The CIA triad describes the fundamental objectives of information security and guides the implementation of security measures to protect information and information systems:
- Confidentiality pertains to the secrecy or privacy of data. To ensure confidentiality, mechanisms such as encryption should be implemented to render data useless if accessed without authorization. Confidentiality ensures that sensitive information is only accessible to authorized individuals or entities.
- Integrity refers to the accuracy and consistency of information. Data mustn’t be modified in an unauthorized manner, and appropriate safeguards must be in place to detect and respond to unauthorized changes in a timely manner. Integrity ensures that information is accurate, complete, and trustworthy. Measures...