Confidentiality/integrity/availability

I happen to prefer CISA’s definition of cybersecurity, because it is concise and encompasses most other definitions, including my little nutshell. I also like the fact that it includes the CIA triad as the basis of the definition. No, this is not the United States’ spy agency, but rather the fundamental foundation of security. That is Confidentiality, Integrity, and Availability (CIA).

We will get to the CIA triad in more detail shortly, but consider our previous discussion about cybersecurity. How does a company maintain its business? Customers support the business because the company provides services acceptable to the customers. What happens if the business is not able to deliver on promised services or the business openly releases customer data? The business would not last long because the customers would quickly transition to competitors. In this example, the business needs to improve reliability or availability and establish...