The CIA Triad, how to keep your data safe
![Image](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjcg6zUiN0uPElhIklr3reoBINAHrbHxVJ8vbcqs8sI1jvbF-s99eytcuanX8qLNXRm9TLdCNPW6HrZKCi6lAaXPuXKHWAXRySio9yZo9ZDc4fu4h2tFI0FV2i9s3utK-GBel9rDh6Sp3zmJAg5hsGfbxmuOZlVkJCBtdrx54MqB6R0VY6jMetcbMh/s320/CIA.jpg)
The CIA Triad stands for Confidentiality, Integrity, and Availability. Confidentiality means that access to data is restricted to only those who should be able to access it. Integrity means that the data is protected from modification except by those who should be able to modify it. Availability means that the data is available at all times to those who should be able to access it. The CIA Triad is implemented at 4 different levels, from largest to smallest: organization, network, application, and end user. To implement the CIA Triad at the Organizational Level: • Security strategy You need a risk based security strategy to minimize the impact of an incident. • Risk assessment You need to assess security-related risks from both internal and external threats. • Disaster recovery You need to ensure data is available with a disaster recovery plan. • Security polic...