CIA Triad
Learn and identify Confidentiality, Integrity and Availability.
Confidentiality
Ensures information is accessible only to the people, systems or processes authorized to see it.
Key principle
Principle of least privilege: everyone accesses only what they need.
Common attacks and threats
- Data theft or leak (data breach)
- Phishing attacks to steal credentials
- Network traffic eavesdropping (sniffing)
- Improper access due to misconfigured permissions
Typical controls and mitigations
- Encryption of data at rest and in transit
- Role-based access control (RBAC)
- Multi-factor authentication (MFA)
- Information classification and labeling