CIA triad
CIA triad definition
CIA triad refers to a popular model used to guide policies for information security within an organization. CIA stands for “confidentiality, integrity, and availability.” Each of the three elements tackles a different aspect of security.
Confidentiality ensures that the data is not disclosed to unauthorized individuals and processes. This could involve techniques like encryption, user ID and password combinations, and two-factor authentication. Integrity focuses on the accuracy and reliability of data during its entire life cycle. In other words, through techniques such as checksums, data validation procedures, and file permissions, a company makes sure the data is not changed by unauthorized people. Lastly, availability ensures that data and resources are available to those who need them when they need them. To achieve this, a company must maintain hardware, ensure it is fixed promptly, and keep the network infrastructure running smoothly.
See also: data integrity, checksum
CIA triad benefits:
- Holistic approach. It’s a comprehensive framework covering all major areas of data security.
- Clear prioritization. By focusing on these three principles, an organization can prioritize their security efforts on issues that matter most.
- Flexibility. This model can be used in a variety of areas from physical security to network security and administrative controls.
- Recognition. As a widely recognized approach, following the CIA trial ensures a company is aligning with industry’s best practices.