In this write up we discus that the CIA Triad is a model used to define the three key elements of information security: Availability, Integrity, and Confidentiality. Authentication verifies a user’s identity, while authorization grants access to specific resources based on identity and permission. The triad and distinction between authentication and authorization are critical in ensuring the protection of sensitive information system through proper design, implementation, and management.

What is the CIA Triad?
The CIA Triad, also known as the AIC (Availability, integrity, Confidentiality) Triad, is a model used to define the three key elements of information security. The CIA triad is critical in the design, implementation, and management of information systems, ensuring that sensitive information is protected from unauthorized access, alteration, or destruction.

What does CIA stand for?
The CIA Triad Stands for availability, integrity, confidentiality. Availability refers to the accessibility of information systems and the data they store. This means that authorized users should be able to access the information they need when they need it. Unavailability could result from hardware or software failure, network issues, or malicious attacks.
Integrity refers to the accuracy and consistency of data. Data integrity ensures that data cannot be altered or deleted by unauthorized individuals, or by mistake. This can be accomplished through the use of checksums, digital signatures, and other security measures.
Confidentiality refers to the protection of sensitive information from unauthorized disclosures. Confidentiality is typically achieved through the use of encryptions, access controls, and other security measures designed to prevent unauthorized access to sensitive information.

Authentication & Authorization
Authentication and authorization are two different but related concepts in information security. Authentication is the process of verifying the identity of a user, device, or service. It is usually the first step in the authorization process. Authorization, on the other hand, is the process of granting access to specific resources, based on the user’s identity and permission. For example, if a user system, the system will use authentication to verify the user’s identity. Once the user’s identity has been established, the authentication process begins and the user is granted access to certain resources, such as account information or the ability to make transactions.

Conclusion
In conclusion, the CIA Triad is a fundamental model used to ensure the protection of sensitive information in information systems. Authenticated users are then granted specific authorization to access resources based on their identity and permission. Ensuring the availability, integrity, and confidentiality of information through proper implementation of the CIA Triad and the distinction between authentication and authorization is essential for maintaining the security of information systems

References
– the. (2023). What is the CIA Triad_ Definition, Explanation, Examples – TechTarget.pdf. Google Docs. https://drive.google.com/file/d/1898r4pGpKHN6bmKcwlxPdVZpCC6Moy8l/view

– Difference between Authentication and Authorization. (2019, June 6). GeeksforGeeks; GeeksforGeeks. https://www.geeksforgeeks.org/difference-between-authentication-and-authorization/

– Hare, V. (2022, July 14). Authentication vs. Authorization – tokenex. Tokenex. https://www.tokenex.com/blog/vh-authentication-vs-authorization/#:~:text=Payment%20authentication%20is%20confirming%20an,to%20fulfill%20a%20transaction%20amount.

-Election Security Spotlight – CIA Triad. (2021, June 15). CIS. https://www.cisecurity.org/insights/spotlight/ei-isac-cybersecurity-spotlight-cia-triad