The CIA Triad Explained: Confidentiality, Integrity, Availability
The CIA triad — Confidentiality, Integrity, Availability — is the foundation of all cybersecurity. Every security control ultimately protects one or more of these three, and every attack tries to break one. It's the first concept on the CyberOps blueprint and the mental model analysts use daily.
The three pillars
- Confidentiality — only authorised people can read the data. Protected by encryption, access control and authentication; broken by data breaches and eavesdropping.
- Integrity — data hasn't been altered. Protected by hashing, digital signatures and checksums; broken by tampering and man-in-the-middle attacks.
- Availability — systems are up when needed. Protected by redundancy, backups and DDoS defence; broken by ransomware and denial-of-service.
How real attacks map to it
A data breach attacks confidentiality; a tampered bank transfer attacks integrity; a DDoS or ransomware attacks availability. When triaging any incident, an analyst instinctively asks "which pillar is under threat?" — it shapes the response. This maps into deeper study on the CyberOps course.
Frequently asked questions
What does the CIA triad stand for?
Confidentiality, Integrity and Availability — the three core goals of information security.
Which pillar does ransomware attack?
Primarily Availability (it locks you out of your data), and increasingly Confidentiality too, since modern ransomware also steals data before encrypting.
How is integrity protected?
With hashing, digital signatures and checksums that reveal if data has been changed from its trusted original.
Related articles
Want hands-on training?
Learn this on real Cisco lab devices with placement support at Attila Technologies, Ahmedabad.