Computer Security Fundamentals: Confidentiality, Integrity and Availability
Confidentiality, integrity, and availability form the CIA triad: the foundational objectives for protecting information and computer systems.
Summary
Confidentiality, integrity, and availability form the CIA triad: the foundational objectives for protecting information and computer systems. A system can meet one objective while failing another.
| Objective | Protection goal | Example controls |
|---|---|---|
| Confidentiality | Prevent unauthorized disclosure | Access restrictions, encryption |
| Integrity | Prevent unauthorized modification or destruction | Message authentication codes, digital signatures |
| Availability | Ensure timely, reliable access for authorized users | Redundancy, failover, tested backups, denial-of-service mitigation |
Incident classification helps guide response: data theft threatens confidentiality, altered permissions threaten integrity, and service outages threaten availability. Authenticated integrity checks help detect unauthorized changes. Least privilege limits users and processes to the permissions needed for their assigned tasks.
Risk assessment prioritizes controls by evaluating threats, vulnerabilities, and potential impacts on the CIA objectives. Layered controls reduce reliance on any single safeguard. Security design also involves trade-offs: restrictive access controls may reduce disclosure risk while preventing legitimate work.
Common Misconceptions: Meeting one CIA objective does not guarantee the others. An unprotected hash alone cannot establish authenticity because an attacker may replace both the data and its hash. Stronger access restrictions do not automatically improve availability.
🧠 Key Concepts
- Confidentiality
- Integrity
- Availability
- Authenticated Integrity Checks
- Least Privilege
- Risk Assessment
- Layered Controls
- Security Trade-offs
🧠 Quick Check
See what you remember from the summary.
An attacker copies restricted files without changing them or interrupting service. Which CIA objective is directly violated?
🧠 Flashcards Preview
Tap a card to reveal the definition.
Ready to quiz yourself?
Test what you remember with a full practice quiz on this note. Create a free account and start in seconds.
Full Notes
Read the original note content before deciding whether to save or study from it.
Computer Security Fundamentals: Confidentiality, Integrity and Availability
📘 Overview Confidentiality, integrity, and availability form the CIA triad, the core objectives of computer security. Security controls protect information and systems against unauthorized disclosure, improper modification, and loss of timely access.
🧠 Key Idea Security requires protecting who can access information, whether information remains trustworthy, and whether authorized users can obtain services when needed. A system can satisfy one objective while failing another.
⚔️ Core Details: - Confidentiality prevents unauthorized disclosure of information through controls such as access restrictions and encryption. - Integrity protects information and system state against unauthorized modification or destruction. - Availability ensures timely, reliable access to information and services for authorized users. - Authenticated integrity checks use message authentication codes or digital signatures to detect unauthorized changes. - Availability controls include redundancy, failover, tested backups, and denial-of-service mitigation. - Risk assessment prioritizes controls by evaluating threats, vulnerabilities, and potential impacts on the CIA objectives.
🎯 Why It Matters: - Classifying incidents by affected objectives improves response: data theft threatens confidentiality, altered permissions threaten integrity, and service outages threaten availability. - Security design requires trade-offs: overly restrictive access controls can prevent legitimate work even while reducing disclosure risk. - Layered controls reduce dependence on a single safeguard and address attacks that compromise several objectives. - An unprotected hash alone cannot establish authenticity because an attacker may replace both the data and its hash.
🧠 Quick Recall: - CIA triad - Confidentiality, integrity, and availability; three foundational information security objectives. - Confidentiality - Protection against unauthorized information disclosure. - Integrity - Protection against improper information modification or destruction. - Availability - Timely and reliable access to information and services by authorized users. - Least privilege - Granting users and processes only the permissions necessary for their assigned tasks.
More ways to study when you copy this note
Copy this note into your library to unlock focused practice sessions and long-term review.
Answer all questions first, then see feedback at the end — the way real exams work.
Focuses each session on what you got wrong, not what you already know.
Full timed exam with all questions, no pausing, and results at the end. Built for board exam prep.
Part of 🗄️ BS Information Systems — 1st Year
Browse this Review Set →More Computer Science notes
See all →More in Information Assurance and Security
See all →More from NoteLib
Browse NoteLib's public notes →Copy this note to your library and get the full Study Pack instantly — summary, key concepts, and practice quiz included.