What is the CIA triad in Security+?
D1 · General · CompTIA Security+ SY0-701The CIA triad is the foundational model of information security. It stands for:
🔵 Confidentiality — Only authorized users can access the data. Controls: encryption, access controls, need-to-know.
🟢 Integrity — Data has not been altered without authorization. Controls: hashing (SHA-256), digital signatures, file monitoring.
🟡 Availability — Systems and data are accessible when needed. Controls: redundancy, backups, DDoS mitigation, UPS.
🔵 Confidentiality — Only authorized users can access the data. Controls: encryption, access controls, need-to-know.
🟢 Integrity — Data has not been altered without authorization. Controls: hashing (SHA-256), digital signatures, file monitoring.
🟡 Availability — Systems and data are accessible when needed. Controls: redundancy, backups, DDoS mitigation, UPS.
Ransomware attacks Availability. Data theft attacks Confidentiality. A rogue employee modifying records attacks Integrity. Know which pillar each attack targets.