1.2 CIA Triad

Confidentiality

Prevent disclosure of information to unauthorized individuals or systems

Integrity

Messages can't be modified without detection

Availability

Systems and networks must be up and running

Confidentiality

Certain information should only be known to certain people by preventing unauthorized information disclosure

Encryption

Encode messages so only certain people can read it

Access controls

Selectively restrict access to a resource

Two-factor authentication

Additional confirmation before information is disclosed

Integrity

Data is stored and transferred as intended, with any modification to the data being identified

Hashing

Map data of an arbitrary length to data of a fixed length

Digital signatures

Mathematical scheme to verify the integrity of data

Certificates

Combine with a digital signature to verify an individual

Non-repudiation

Provides proof of integrity, can be asserted to be genuine

Availability

Information is accessible to authorized users, always at your fingertips

Redundancy

Build services that will always be available

Fault tolerance

System will continue to run, even when a failure occurs

Patching

Enhances stability and closes security holes