CIA Triad (SEC+ 1.2)

CIA Triad

the fundamentals of security, also can be referred as AIC triad

C.I.A

Confidentiality, Integrity, Availability

Confidentiality

Certain info should only be known to certain people (Ex. encryption)

Encryption

encode messages so only certain people can read it

Access Controls

Selectively restrict access to a resource

Two factor Authentication

additional confirmation before info is disclosed

access control and 2FA are examples of what?

Encryption

Integrity

Data is stored and transferred as intended

Hashing

map data of a random length, to data of a set length

Digital Signature

mathematical scheme to verify the integrity of data

Certificates

combine with a digital signature to verify an individual

Hashing, digital signatures, and certificates are apart of what CIA triad?

Integrity

Availability

Information is accessible to authorized users (always at your fingertips)

Redundancy

Build services that will always be available

Fault tolerance

system will continue to run even when a failure occurs

Patching

close security holes; stability

Redundancy, fault tolerance, and patching are examples of what CIA triad?

Availability