The CIA triad is a model designed to guide information security policies within an organization. Every organization’s information security policies depend on this well known model. It consists of three core principles that make up the foundation of information security:
- Confidentiality: This principle ensures that information is only accessible to authorized individuals or entities. Confidentiality involves protecting sensitive information from being disclosed to unauthorized parties or individuals.
- Integrity: This principle ensures that information is accurate and complete and has not been altered or modified by unauthorized individuals or entities. Integrity involves protecting information from unauthorized modification, deletion, or tampering.
- Availability: This principle ensures that information is accessible to authorized individuals or entities when needed. Availability involves ensuring that information is available when required and that the systems and infrastructure necessary to access the information are functioning correctly.
Together, the CIA triad provides a framework for organizations to protect their information assets and maintain the confidentiality, integrity, and availability of their information.