1-50 Security Principles and Concepts

Front

Three principles of security control and management. Also known as the information security triad. Also referred to in reverse order as the AIC triad.

Back

CIA Triad

Front

The fundamental security goal of keeping information and communications private and protecting them from unauthorized access.

Back

Confidentiality

Front

The fundamental security goal of keeping organizational information accurate, free of errors, and without unauthorized modifications.

Back

Integrity

Front

The fundamental security goal of ensuring that computer systems operate continuously and that authorized persons can access data that they need.

Back

Availability

Front

The security goal of ensuring that the party that sent a transmission or created data remains associated with that data and cannot deny sending or creating that data.

Back

Non-repudiation

Front

Develops computer security standards used by US federal agencies and publishes cybersecurity best practice guides and research.

Back

National Institute of Standards and Technology (NIST)

Front

Standards, best practices, and guidelines for effective security risk management. Some frameworks are general in nature, while others are specific to industry or technology types.

Back

cybersecurity frameworks (CSF)

Front

A technology or procedure put in place to mitigate vulnerabilities and risk and to ensure the confidentiality, integrity, and availability (CIA) of information.

Back

security controls

Front

An analysis that measures the difference between the current and desired states in order to help assess the scope of work included in a project.

Back

Gap analysis

Front

A security process that provides identification, authentication, and authorization mechanisms for users, computers, and other entities to work with organizational assets like networks, operating systems, and applications.

Back

identity and access management (IAM)