CIA Triad
A foundation principle for Information Security that guides the design and implementation of security measures to protect information, and as a comprehensive strategy that includes policies and Security Controls to minimize Cyber Threats. Provides a framework for understanding and implementing security measure such as Cryptography.
Three Principles:
-
Confidentiality
-
Integrity
-
Availability
These three principles should prevent Threat Actors from unauthorized access or control to private data.
Confidentiality
A property where adversaries, or entities that are not authorized access or modify information, from reading our data. Information should not be disclosed without authorization. Meaning, only authorized users can access specific assets or data.
Integrity
A property that prevents entities from tampering with our private data. Maintenance of, and assurance of, accuracy and consistency (completeness and trustworthiness) of data over its life-cycle. Encryption is created to safeguard data from being tampered