CIA Overview

A reference model consisting of three principles - confidentiality, integrity, and availability - that are used to protect information from unauthorized access, modification, and ensure its accessibility to authorized users.

CIA Triad

The principle that limits access to information and prevents unauthorized users from accessing, copying, or transmitting it.

Confidentiality

The principle that ensures the trustworthiness of information by verifying its source and identifying any changes that may have occurred.

Integrity

The principle that ensures data is always accessible to its authorized users, minimizing downtime and implementing measures to prevent denial-of-service attacks or accidental changes to access control.

Availability

The process of encoding information to prevent unauthorized access, ensuring its confidentiality and integrity.

Encryption

A method used by attackers to manipulate individuals into providing sensitive information or gaining physical access to secure areas.

Social Engineering

A policy that restricts access to information only to those who require it to perform their job duties.

Need-to-know Policy

A mathematical function that generates a fixed-size string of characters from data, used to verify data integrity and identify any changes.

One-way Hash Calculation

An attack that prevents legitimate users from accessing a resource by overwhelming it with an excessive amount of data.

Denial-of-Service (DoS) Attack

A comprehensive plan that outlines procedures and measures to recover and restore data and systems in the event of a disaster or disruption.

Disaster Recovery Plan

A system design that ensures continuous operation and minimal downtime by employing redundancy and failover mechanisms.

High Availability