CIA Triad

CIA triad#

The CIA triad is a foundational information security model designed to guide policies for protecting data and systems.
CIA stands for Confidentiality, Integrity, and Availability.

• Confidentiality: Ensures sensitive data is accessed only by authorized individuals. It restricts unauthorized viewing or exposure of private information.
  • Controls: Encryption, access control lists (ACLs), multi-factor authentication (MFA).
• Integrity: Guarantees that information and systems remain trustworthy, accurate, and have not been improperly altered or destroyed.
  • Controls: Hashing, version control, digital signatures.
• Availability: Ensures authorized users have timely, reliable access to information and systems exactly when they need them.
  • Controls: Data backups, redundancy, DDoS protection.