Tecnología Electrónica

The CIA Triad: Core Purpose of Information Systems Security

Information security isn't about firewalls or passwords—it's about protecting three fundamental properties of data.

The CIA Triad

PropertyDefinitionKey Controls
ConfidentialityOnly authorized subjects access dataEncryption (AES-256, TLS 1.3), RBAC/ABAC, MFA, DLP
IntegrityData remains accurate & unalteredHashing (SHA-256), digital signatures, version control, WORM storage
AvailabilitySystems & data accessible when neededRedundancy (RAID, clusters), backups (3-2-1), DR/BCP, DDoS mitigation

Supporting Pillars

  • Authentication & Authorization: Zero Trust, least privilege, PAM.
  • Monitoring & Detection: SIEM, IDS/IPS, UEBA, SOAR.
  • Governance: Policies, risk assessments, compliance (GDPR, HIPAA, SOC 2), awareness training.
  • Incident Response: Playbooks, forensics readiness, tabletop exercises.

Why It Matters

A breach in any leg of the triad cascades: leaked IP (confidentiality), corrupted financials (integrity), ransomware downtime (availability). Security programs prioritize controls based on data classification and business impact analysis—not tool checklists.

>

<

Seguridad para el hogar