{"id":355,"date":"2025-02-10T03:02:20","date_gmt":"2025-02-10T03:02:20","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/?page_id=355"},"modified":"2025-02-10T03:09:15","modified_gmt":"2025-02-10T03:09:15","slug":"write-up-1","status":"publish","type":"page","link":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/write-up-1\/","title":{"rendered":""},"content":{"rendered":"\n

The Importance of the CIA Triad and Understanding the Differences Between<\/strong><\/p>\n\n\n\n

Authentication and Authorization<\/strong><\/p>\n\n\n\n

Written By: Adryanna Smith<\/p>\n\n\n\n

<\/p>\n\n\n\n

In Brief (Bottom Line Up Front)<\/p>\n\n\n\n

CIA Triad consists of Confidentiality, Integrity, and Availability, acting as a basis for<\/p>\n\n\n\n

cybersecurity that strengthens trust and information dependability. All three have a complex,<\/p>\n\n\n\n

interrelated relationship, with authentication including access permissions and verification,<\/p>\n\n\n\n

and with authorization providing a basis for granting access permissions. For any activity<\/p>\n\n\n\n

focused on securing systems, a thorough grasp of these terms is imperative.<\/p>\n\n\n\n

The CIA Triad<\/p>\n\n\n\n

The CIA Triad is a well-known model for defining information security’s critical<\/p>\n\n\n\n

ingredients: Confidentiality, Integrity, and Availability. All three individually form security<\/p>\n\n\n\n

controls geared towards safeguarding information against unauthorized access, manipulation,<\/p>\n\n\n\n

and loss (Chai, 2023).<\/p>\n\n\n\n

Confidentiality<\/p>\n\n\n\n

Confidentiality involves restriction of information access to only approved persons.<\/p>\n\n\n\n

To maintain confidentiality, several techniques including access controls, encryptions, and<\/p>\n\n\n\n

multi-factor authentication (MFA) restrict access (Smith & Jones, 2022). An applicable case<\/p>\n\n\n\n

in point is banking systems, in which both transactions and information are preserved with<\/p>\n\n\n\n

end-to-end encryptions, effectively protecting them from potential attack sources posed by<\/p>\n\n\n\n

unauthorized parties.<\/p>\n\n\n\n

Integrity<\/p>\n\n\n\n

The accuracy and maintenance of information form integrity, allowing for only approved<\/p>\n\n\n\n

processes to make any modifications (Doe, 2021). Organizations use hashing algorithms,3<\/p>\n\n\n\n

electronic signatures, and version controls to detect any unauthorized modifications (Doe,<\/p>\n\n\n\n

2021). For example, software developers use hash algorithms to confirm software packages’<\/p>\n\n\n\n

integrity and genuineness when about to install them.<\/p>\n\n\n\n

Availability<\/p>\n\n\n\n

The principle of availability ensures information and programs can be reached by<\/p>\n\n\n\n

duly qualified persons at any time when needed. Techniques such as redundancy, disaster<\/p>\n\n\n\n

planning, and Distributed Denial of Service (DDoS) attack defenses always make<\/p>\n\n\n\n

information and programs accessible (Chai, 2023). An example is using cloud service<\/p>\n\n\n\n

providers in delivering information to several servers, allowing for continuity of operations<\/p>\n\n\n\n

even in cases of server failure.<\/p>\n\n\n\n

Authentication versus Authorization<\/p>\n\n\n\n

The terms authentication and authorization have been confused with one another, but<\/p>\n\n\n\n

they serve two specific security purposes. Identification and checking an individual\u2019s identity<\/p>\n\n\n\n

constitute authentication, whereas granting access to a specific resource for an authenticated<\/p>\n\n\n\n

individual constitutes authorization (Smith & Jones, 2022).<\/p>\n\n\n\n

Authentication<\/p>\n\n\n\n

Being an important function for confirming a user\u2019s identity before allowing access to<\/p>\n\n\n\n

a system, a service, or a resource, authentication is an important function (Doe, 2021).<\/p>\n\n\n\n

Identification can occur through several techniques, such as passwords, biometric markers,<\/p>\n\n\n\n

and two-step (two-factors) authentication (Doe, 2021). For instance, in logging in to an email,<\/p>\n\n\n\n

a user enters a username and password, and then a one-time passcode received in a message<\/p>\n\n\n\n

to a mobile device, enhancing security (Doe, 2021).<\/p>\n\n\n\n

Authorization<\/p>\n\n\n\n

Authorization sets access privileges granted to a confirmed individual (Smith &<\/p>\n\n\n\n

Jones, 2022). Organizations apply role-based access control (RBAC) together with policy-<\/p>\n\n\n\n

based approaches (Chai, 2023). In a medical environment, medical professionals can view a<\/p>\n\n\n\n

patient\u2019s record in an electronic medical record system, with the permission to modify and<\/p>\n\n\n\n

delete such a record being restricted to administrators alone.<\/p>\n\n\n\n

Conclusion<\/p>\n\n\n\n

The CIA Triad, including Confidentiality, Integrity, and Availability, sets out guiding<\/p>\n\n\n\n

principles for cybersecurity practice implementations. Organizations implement a range of<\/p>\n\n\n\n

techniques with a view to protecting sensitive information, its integrity, and availability in<\/p>\n\n\n\n

specific systems. Controls over access form a key part, consisting of both authentication and<\/p>\n\n\n\n

authorization, allowing admission only to specific entities and confirming access privileges<\/p>\n\n\n\n

regarding defined roles. By developing awareness and putting such techniques into practice,<\/p>\n\n\n\n

an entity can reinforce its security and defend against vulnerabilities regarding cybersecurity<\/p>\n\n\n\n

threats.<\/p>\n\n\n\n

References<\/p>\n\n\n\n

Chai, T. (2023). *Cybersecurity Principles and Best Practices*. Tech Security Press.<\/p>\n\n\n\n

Doe, J. (2021). *Information Security Fundamentals*. CyberTech Publications.<\/p>\n\n\n\n

Smith, R., & Jones, M. (2022). *Digital Security in the Modern Age*. InfoSec Global<\/p>\n","protected":false},"excerpt":{"rendered":"

The Importance of the CIA Triad and Understanding the Differences Between Authentication and Authorization Written By: Adryanna Smith In Brief (Bottom Line Up Front) CIA Triad consists of Confidentiality, Integrity, and Availability, acting as a basis for cybersecurity that strengthens trust and information dependability. All three have a complex, interrelated relationship, with authentication including access… <\/p>\n

Read More<\/a><\/div>\n","protected":false},"author":30365,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/wp-json\/wp\/v2\/pages\/355"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/wp-json\/wp\/v2\/users\/30365"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/wp-json\/wp\/v2\/comments?post=355"}],"version-history":[{"count":3,"href":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/wp-json\/wp\/v2\/pages\/355\/revisions"}],"predecessor-version":[{"id":371,"href":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/wp-json\/wp\/v2\/pages\/355\/revisions\/371"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/adryannasmithcyse201s\/wp-json\/wp\/v2\/media?parent=355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}