CIA Triad

Cybersecurity - What is the CIA triad?

Poll

What does CIA stand for in the CIA Triad?

• Central Intelligence Agency

• Cybersecurity Information Agency

• Confidentiality Integrity Accountability

• Confidentiality Integrity Availability

Multiple Choice

protecting data from being improperly changed/deleted

• confidentiality

• availability

• integrity

Multiple Choice

making sure that software/data/services can be used/accessed when they are needed

• confidentiality

• availability

• integrity

Multiple Choice

keeping private/sensitive info from reaching the wrong people

• confidentiality

• availability

• integrity

CIA Triad Notes

​Confidentiality	​Integrity	​Availability
​Preventing sensitive data from reaching people who are not authorized (have permission) to access it.	​Keeping information accurate and trustworthy by preventing improper modifications (changes) or deletions	​Information can be easily accessed when needed

Multiple Choice

What does confidentiality mean in the context of information security? Choose the one BEST answer.

• Confidentiality means making sure information is correct and hasn't been changed by mistake.

• Confidentiality means only certain people can access the information.

• Confidentiality means the information can be easily accessed by anyone.

• Confidentiality means using strong passwords to protect information.

Multiple Choice

How can organizations ensure the integrity of their data?

• By training people to handle important documents and use strong passwords.

• By turning data into a secret code that only certain people can understand.

• By controlling who can make changes to data and detecting and fixing mistakes or accidental deletions.

• By keeping computers up to date with the latest updates.

Multiple Choice

It important for organizations to have plans in place to deal with emergencies such as fires or natural disasters. These situations can result in damaged equipment and interruptions in service. Which part of CIA triad does this correspond to?

• Authorization

• Confidentiality

• Availability

• Integrity

Two Big 'A's in Confidentiality

Authentication - verifying that a person is who they say they are

Examples include passwords, two-factor authentication, biometric scans

Authorization - determining if a person should have access to data
To keep information safe, most organization use a "need to know" policy when granting access to information

Confidentiality Examples

• Strong Password

• Two-factor authentication

• biometric scanning

Digital Security

• Using a key or ID badge to get into a secure building or room

​Physical Security

Integrity Examples

Data that should have integrity:
- Medical Records
- Bank accounts
- Class grades
- Applications (job, college, mortgage, etc.)

Confidentiality methods can also protect integrity. You can't change/delete data if you can't access it.

Example: Sharing a GoogleDoc as "read-only" prevents the wrong people from editing

What is Encryption?

Data encryption is a way to keep important information safe. It changes the data into a secret code that only certain people can understand. This is important because it keeps our private information secure. Even if someone bad gets their hands on the data, they won't be able to read it. Encryption helps protect our information when it's stored and when it's being sent from one place to another. If someone tries to look at the data without permission, it will just look like a bunch of random letters and numbers, like a jumble of random stuff.

Availability

• Website doesn't load when too many people visit it

• Files saved on only one hard drive are lost when it is damaged

Poor Examples ❌

• App on your phone works when you open it

• Phone automatically updates to the most recent operating system

Good Examples ✅

Why is the CIA Triad important?

Keeping Data Secure

• Avoid loss of sensitive information

• Protect people from fraud, phishing, and identity left

• Prevent profit loss and reputation of businesses

• Avoid legal consequences for mishandling data

Multiple Choice

Frequent data backups, version history, and digital signatures allow us to track changes to data and who made those changes. This helps ensure ____ is maintained.

• Confidentiality

• Integrity

• Availability

Multiple Choice

The server room of a small business catches on fire and the main server is destroyed. It will take 2 hours to get the backup server up and running. Which element of the CIA triad is compromised?

• Confidentiality

• Integrity

• Availability

Multiple Choice

Encryption and two-factor authentication are methods that can help ensure ____.

• Confidentiality

• Integrity

• Availability