The CIA triad is the basic model for what security protects. Confidentiality means only authorized people can read information. Integrity means information is accurate and has not been changed without authorization. Availability means systems and data are there when authorized users need them. Nearly every control you study maps to one or more of these goals, and many exam questions quietly ask 'which part of the triad is affected?' Some texts use DAD (disclosure, alteration, destruction or denial) for the opposite of CIA, which helps you map an attack to the goal it harms.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.