The CIA Triad and seven domains of IT infrastructure security

¶ … Confidentiality, Integrity, and Availability

In the contemporary information systems environment, the security of organizational information resources is essential given an increase of hacker incidents globally. Data confidentiality is essential to ensure that the private information is not disclosed or made available to unauthorized individuals. On the other hand, the integrity is the part of information security that ensures that program and data are exchanged only by an authorized person. The system integrity assures that the system performs its intended functions without its inadvertent manipulation. The availability assures that the systems perform its intended function, and it does not deny its availability to the authorized user. These three security concepts (Integrity, Confidentiality, and Availability) is referred as Triad that performs fundamental security objectives for organizational information systems.

The objective of this paper is to explore the three concepts of information security.

The CIA Triad

The confidentiality can only be attained when an organization is able to achieve a restriction on information disclosures and access. Moreover, confidentiality involves protecting the proprietary information to enhance the personal privacy. Moreover, the integrity involves guiding against improper destruction or modification of information to ensure the authenticity of the information. A loss of integrity can lead to the destruction of information infrastructures. Additionally, the concept availability ensures a reliable and timely access to the use of information, and a loss of availability can lead to a destruction of the organizational information infrastructures. (Kim, & Solomon, 2014).

An example of confidentiality is the privacy of the student's grade information. In the United States, the student grade information is an asset and its confidentiality is very important to the student. The law regulates a release of such information to the public, and the regulation stipulates that the information should only be released to the students, employees, or parent. Moreover, organizations are required to protect the employee and customer's data from unauthorized access. In the United States, the sensitive data of several companies have been compromised by the hackers and sensitive data have been stolen eroding the concept of integrity, confidentiality and availability accorded to the data.

Conclusion

The paper explores the three concepts of confidentiality, availability and integrity of the information systems. Adhering to these concepts will assist organizations to protect their IT infrastructures

Reference

Kim, D., & Solomon, M. G. (2014). Fundamentals of information systems security (2nd Ed.). Burlington, MA: Jones & Bartlett Learning.