Security pillars – confidentiality, integrity, and availability
The American National Institute of Standards and Technology (NIST) has defined a framework for cyber security that should be implemented in all aspects of networks and applications. This framework is referred to as the confidentiality, integrity, and availability (CIA) triad. The CIA framework summarizes the requirements for network security, as defined by NIST (https://csrc.nist.gov/glossary/term/availability), as follows:
- Confidentiality: Preserving authorized restrictions on information access and disclosure, including means for protecting personal privacy and proprietary information.
- Integrity: Guarding against improper information modification or destruction. This includes ensuring information non-repudiation and authenticity.
- Availability: Guarding against improper information modification or destruction. This includes ensuring information non-repudiation and authenticity.
The following...