In the context of information security, what are the three pillars of the CIA triad?

In the context of information security, what are the three pillars of the CIA triad?

• A. Compliance, Integrity, Accessibility.
• B. Confidentiality, Integrity, Availability.
• C. Confidentiality, Integrity, Anonymity.
• D. Control, Identity, Access.

Answer: (B)

At the heart of information security is a triad that covers protecting information from unauthorized access, keeping data accurate and trustworthy, and ensuring that authorized users can access the information when needed. These three pillars are: Confidentiality: Focuses on keeping information private and preventing unauthorized disclosure. Techniques include encryption, strict access controls, authentication, and need-to-know policies. Without confidentiality, sensitive data could be exposed to the wrong people. Integrity: Ensures information remains correct, complete, and unaltered by unauthorized actions. This involves checks like hashing, digital signatures, versioning, and tamper-evident logging so you can detect and respond to any changes that shouldn’t have occurred. Availability: Guarantees that authorized users can access the information and systems they need when they need them. This relies on reliable infrastructure, redundancy, backups, incident response, and protections against disruptions like outages or DoS attacks. The other options mix in terms that aren’t part of the standard trio. For example, concepts like Compliance or Anonymity, or combinations such as Control, Identity, Access, don’t represent the three foundational pillars. Only Confidentiality, Integrity, and Availability together capture the essential goals of protecting data and services.

At the heart of information security is a triad that covers protecting information from unauthorized access, keeping data accurate and trustworthy, and ensuring that authorized users can access the information when needed. These three pillars are:

Confidentiality: Focuses on keeping information private and preventing unauthorized disclosure. Techniques include encryption, strict access controls, authentication, and need-to-know policies. Without confidentiality, sensitive data could be exposed to the wrong people.

Integrity: Ensures information remains correct, complete, and unaltered by unauthorized actions. This involves checks like hashing, digital signatures, versioning, and tamper-evident logging so you can detect and respond to any changes that shouldn’t have occurred.

Availability: Guarantees that authorized users can access the information and systems they need when they need them. This relies on reliable infrastructure, redundancy, backups, incident response, and protections against disruptions like outages or DoS attacks.

The other options mix in terms that aren’t part of the standard trio. For example, concepts like Compliance or Anonymity, or combinations such as Control, Identity, Access, don’t represent the three foundational pillars. Only Confidentiality, Integrity, and Availability together capture the essential goals of protecting data and services.