Five Pillars of Information Security (Goals of Asset Security)

Confidentiality

Protects assets using important principles such as need-to-know and least privilege; prevents unauthorized disclosure

Integrity

Protects and adds value to assets by making them more accurate, more timely, more current, more meaningful; prevents unauthorized or accidental changes to assets such as information

Availability

Protects critical assets based on value to ensure organizational assets are available when required by stakeholders

Authenticity

Proves assets are legitimate and bona fide, and verifies that they are trusted and verified. Proves the sources and origin of important valuable assets. Also referred as to “proof of origin”

Nonrepudiation

Provides assurance that someone cannot dispute the validity of something; the inability to refute accountability or responsibility. Also, inability to deny having done something