Chapter 1
IT Concepts and Terminology
Course: Comptia Tech Fc0 U71
Subject: Comptia Tech Fc0U71
Chapter: Security
1. Confidentiality, Integrity, and Availability (CIA Triad)
The CIA Triad is the cornerstone of modern information security. It defines the three core principles required to safeguard data and IT systems, ensuring they are protected from threats and resilient in operation. All cybersecurity strategies, risk assessments, and compliance frameworks are based on these principles.
a. Confidentiality
Definition:
Confidentiality ensures that only authorized individuals or systems can access sensitive or protected data. Unauthorized access, whether accidental or malicious, compromises confidentiality and can lead to breaches, identity theft, or regulatory violations.
Key Techniques:
- Encryption: Converts readable data into ciphertext using algorithms (e.g., AES, RSA). Only authorized parties with the correct decryption keys can read the data.
- Access Control Lists (ACLs): Define specific user permissions (read, write, execute) for files, directories, or resources.
- Multi-Factor Authentication (MFA): Requires users to verify their identity using multiple factors (e.g., password + OTP or biometric).
- Data Classification: Labeling data as public, internal, confidential, or restricted to apply appropriate controls.
- Network Segmentation: Isolates sensitive systems to prevent unauthorized lateral movement.