C
Confidentiality
Confidentiality ensures that sensitive information can only be accessed by authorized people, systems, or applications.
- Encryption
- Passwords
- Multifactor authentication
- Access controls
- User permissions
Cybersecurity Foundations
The CIA Triad
The CIA Triad is a foundational cybersecurity model built around three important principles: confidentiality, integrity, and availability. Together, these principles help organizations protect information, systems, networks, and users.
The Three Principles
What Does CIA Mean in Cybersecurity?
In cybersecurity, CIA does not refer to the intelligence agency. It represents confidentiality, integrity, and availability. These three goals help cybersecurity professionals determine how information and technology should be protected.
I
Integrity
Integrity ensures that information remains accurate, complete, trustworthy, and protected from unauthorized changes.
- Hashing
- Digital signatures
- File permissions
- Version control
- Audit logs
A
Availability
Availability ensures that systems, networks, and information remain accessible to authorized users when they are needed.
- Backups
- Redundant systems
- Disaster recovery
- DDoS protection
- System maintenance
Security Balance
How the CIA Triad Works Together
Strong cybersecurity requires all three principles to work together. Protecting one area while ignoring another can leave systems vulnerable.
Cybersecurity
C
Confidentiality
Keep information private.
I
Integrity
Keep information accurate.
A
Availability
Keep systems accessible.
01
Confidentiality
Keeping Information Private
Confidentiality protects sensitive information from unauthorized access or disclosure. Only approved users should be able to view protected data.
What Confidentiality Protects
- Passwords and login credentials
- Credit card and banking information
- Medical and educational records
- Personal identification information
- Business and government documents
How Confidentiality Is Protected
- Data encryption
- Strong passwords
- Multifactor authentication
- Role-based access control
- Secure network connections
Example
Your Hostinger account uses confidentiality controls when it requires your password before allowing access to your website files, domain settings, and hosting tools.
02
Integrity
Keeping Information Accurate
Integrity protects data from unauthorized changes, deletion, corruption, or manipulation. Users must be able to trust that information is correct.
What Integrity Protects
- Bank account balances
- School grades and records
- Medical information
- Website files and databases
- Software downloads and updates
How Integrity Is Protected
- Cryptographic hashes
- Digital signatures
- File permissions
- Version control systems
- Audit logs and monitoring
Example
Integrity is protected when only authorized users can edit your website files and when backups allow you to restore the correct version if a file is accidentally changed.
03
Availability
Keeping Systems Accessible
Availability ensures that authorized users can access systems, services, and information whenever they need them.
What Availability Protects
- Websites and online stores
- Hospital and emergency systems
- Email and communication services
- Cloud applications
- Company networks and servers
How Availability Is Protected
- Regular data backups
- Redundant servers
- Uninterruptible power supplies
- Disaster recovery planning
- DDoS prevention and monitoring
Example
Availability means visitors can access CyberSecurity Life when they need it. Reliable hosting, backups, maintenance, and server protection help keep the website online.
Real-World Scenarios
The CIA Triad in Everyday Technology
The CIA Triad applies to websites, businesses, schools, hospitals, financial systems, personal devices, and many other technologies.
Online Banking
Confidentiality:
Encryption protects account information and login credentials.
Integrity:
Transaction records must remain accurate and unchanged.
Availability:
Customers must be able to access banking services when needed.
Hospital Systems
Confidentiality:
Patient records must remain private.
Integrity:
Medical information must remain accurate.
Availability:
Doctors must be able to access patient information quickly.
Online Stores
Confidentiality:
Customer payment and account information must be protected.
Integrity:
Product prices, orders, and inventory must remain correct.
Availability:
The store must remain accessible to customers.
School Systems
Confidentiality:
Student records and personal information must remain private.
Integrity:
Grades and attendance records must not be altered improperly.
Availability:
Students and instructors need reliable access to coursework.
When Security Fails
What Happens When a Principle Is Compromised?
A cybersecurity incident may affect one, two, or all three parts of the CIA Triad.
Confidentiality Failure
Unauthorized users gain access to private information.
Example: A stolen password exposes customer records.
Integrity Failure
Information is changed, corrupted, or deleted without permission.
Example: An attacker changes prices in an online store.
Availability Failure
Authorized users cannot access a system or service.
Example: A DDoS attack takes a website offline.
Quick Comparison
Comparing the Three Principles
| Principle | Main Goal | Common Protections | Example Threat |
|---|---|---|---|
| Confidentiality | Prevent unauthorized access | Encryption, passwords, MFA, access controls | Data breach |
| Integrity | Prevent unauthorized changes | Hashing, signatures, permissions, audit logs | File tampering |
| Availability | Maintain reliable access | Backups, redundancy, monitoring, recovery plans | DDoS attack |
Knowledge Check
Can You Identify the CIA Principle?
Read each situation and think about which part of the CIA Triad is being protected.
A website encrypts customer payment information.
View Answer
Confidentiality
A company uses file hashes to verify that software was not altered.
View Answer
Integrity
A business uses backup servers to keep its website online.
View Answer
Availability
Remember the Foundation
Private, Accurate, and Accessible
Confidentiality keeps information private, integrity keeps it accurate, and availability keeps it accessible. Together, these principles provide the foundation for protecting modern technology.
Confidentiality
Integrity
Availability
Review the CIA Triad