Cybersecurity Glossary
CIA Triad
The three properties security exists to protect: confidentiality, integrity and availability.
What CIA Triad means
Confidentiality means only the right people can see the data. Integrity means it has not been altered without authorisation. Availability means it is there when needed. Most security decisions are a trade off between the three, and naming which one you are protecting clarifies the argument.
Why CIA Triad matters for small businesses and nonprofits
Small organisations tend to focus on confidentiality and neglect availability and integrity. Yet ransomware is primarily an availability attack, and a quietly altered invoice or payroll record is an integrity attack that can go unnoticed for months.
What to do about CIA Triad
- When assessing a risk, state which of the three properties it threatens
- Do not let confidentiality controls block availability for legitimate staff
- Protect integrity with audit logs and separation of duties, not only with access control
Not sure where you stand on this?
We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.