The CIA Triad—Confidentiality, Integrity, and Availability

This section will describe some of the fundamental information security concepts that form the basis of all information security initiatives and are required for your CCSP exam.

Note

Although some of you may already be aware of these concepts, this section is included to establish key terminology used in the chapters to follow.

The fundamental information security concepts include the following:

• Confidentiality: This can be defined as the protection of data to ensure that it can only be accessed by people with the right level of permissions, that is, those who are authorized to view the data. Theft of credit card information is an example of a breach of confidentiality. Various confidentiality controls can be used in order to enforce the required level of secrecy within the data processing system and prevent the unauthorized disclosure of confidential information. Confidentiality should be ensured for...