Writing Sample 1: The CIA Triad

The CIA Triad — confidentiality, integrity, and availability is a foundational model in cybersecurity and a core part of understanding how information systems should be protected. In our coursework, cybersecurity is described as an interdisciplinary field that connects technology with business, law, ethics, sociology, and psychology (Kirkpatrick, 2025). Because modern organizations rely on complex IT systems involving people, processes, and technology working together, the CIA Triad helps ensure that the information flowing through these systems remains secure, reliable, and accessible. It also supports the broader mission of information security, which includes protecting an organization’s ability to function, enabling safe operation of applications, safeguarding data, and securing technology assets (Kirkpatrick, 2025).

Confidentiality refers to keeping information hidden from unauthorized individuals. In an information system, confidentiality protects sensitive data such as personal records, financial information, intellectual property, and internal business documents. Confidentiality is maintained through controls such as encryption, authentication, access restrictions, and secure communication protocols (Mutune, 2023). When confidentiality fails, private data becomes exposed, which can lead to identity theft, financial loss, reputational damage, and violations of regulations like GDPR or PCI DSS. Confidentiality is essential because organizations depend on trust both internally and externally to operate effectively.

Integrity focuses on ensuring that information remains accurate, consistent, and unaltered. In cybersecurity, integrity protects data from being tampered with, corrupted, or manipulated. This is especially important because organizations rely on actionable information data that has been processed and organized in a way that supports decision-making (Kirkpatrick, 2025). If integrity is compromised, the information becomes unreliable, which can disrupt operations, mislead leadership, and create vulnerabilities in critical systems. Integrity is supported through hashing, digital signatures, audit logs, and change-management processes. As our module notes, information security’s mission includes ensuring systems and content “stay the way they are,” which directly reflects the importance of integrity (Kirkpatrick, 2025).

Availability ensures that systems, services, and data remain accessible when authorized users need them. Modern organizations depend on interconnected infrastructure networks, servers, cloud platforms, and devices to operate continuously. Availability is supported through redundancy, backups, disaster recovery planning, and protection against threats like denial-of-service attacks. Our course materials highlight how increasingly connected devices create new conduits for malware and disruptions, making availability a growing challenge (Kirkpatrick, 2025). When availability fails, business operations can halt, communication can break down, and critical services may become inaccessible. In sectors like healthcare, transportation, or energy, availability failures can have serious real-world consequences.

A major real-world example of a confidentiality failure is the 2017 Equifax breach. Attackers exploited an unpatched vulnerability in the company’s web application framework, gaining access to sensitive data belonging to approximately 147 million people (Federal Trade Commission, 2019). This incident reflects several concepts from our module: the importance of patching aging code, the risks created by evolving threats, and the need for strong organizational controls. The impact was severe individuals faced long-term risks of identity theft, while Equifax experienced reputational damage, congressional investigations, and hundreds of millions of dollars in fines. The breach also demonstrated how failures in IT and cybersecurity coordination can lead to catastrophic outcomes, especially when critical systems are not properly maintained.

Several cybersecurity strategies could have reduced the likelihood of the Equifax breach. Regular patch management is one of the most important practices, as applying updates promptly prevents attackers from exploiting known vulnerabilities. Network segmentation can limit how far attackers can move within an organization’s infrastructure. Continuous monitoring and intrusion detection systems help identify suspicious activity early. Encrypting sensitive data ensures that even if attackers gain access, the information remains unreadable. Strong authentication and authorization controls also reduce the risk of unauthorized access. These practices align with the interdisciplinary nature of cybersecurity, requiring cooperation between IT, leadership, engineering, and security teams to protect organizational operations (Kirkpatrick, 2025).

Authentication and authorization are also essential concepts in cybersecurity. Authentication verifies a user’s identity, such as logging in with a password, fingerprint, or multi-factor authentication. Authorization determines what an authenticated user is allowed to do within a system. For example, a system administrator may have permission to modify configurations, while a regular employee may only be able to view certain files. In simple terms, authentication answers “Who are you?” while authorization answers “What are you allowed to access?” (Mutune, 2023). These concepts support confidentiality and integrity by ensuring that only the right people can access or modify information within an organization’s information systems.

 

References

Federal Trade Commission. (2019). Equifax data breach settlement. https://www.ftc.gov

Kirkpatrick, C. E. (2025). The interdisciplinary nature of cybersecurity [Course module]. Old Dominion University, School of Cybersecurity.

Mutune, J. (2023). Understanding the CIA Triad in cybersecurity. Chai Journal.

Writing Sample 2: SCADA Systems and Critical Infrastructure

Supervisory Control and Data Acquisition (SCADA) systems are specialized industrial control systems used to monitor, manage, and automate essential infrastructure operations. They collect real-time data from sensors and equipment, transmit that information across networks, and allow operators to control industrial processes remotely. In cybersecurity terms, SCADA systems sit at the intersection of operational technology (OT) and information technology (IT), making them vital to national security, public safety, and economic stability. Because modern critical infrastructure depends on interconnected digital systems, SCADA applications play a central role in ensuring that essential services remain functional, efficient, and secure.

SCADA systems are used across multiple sectors of critical infrastructure. In the energy industry, they manage power generation, transmission, and distribution by monitoring grid performance, controlling substations, and regulating load balancing. Transportation systems rely on SCADA to operate rail switches, traffic signals, and airport fuel systems. Water management facilities use SCADA to control pumps, chemical treatment processes, and reservoir levels. Manufacturing environments depend on SCADA to automate assembly lines, track production metrics, and maintain equipment safety. Even healthcare facilities use SCADA-supported building automation systems to regulate HVAC, power supply, and medical gas distribution. In each of these sectors, SCADA provides the visibility and control needed to keep operations stable and responsive.

Despite their importance, SCADA systems introduce significant cybersecurity vulnerabilities. One major risk is the reliance on outdated or legacy technology. Many SCADA environments were designed decades ago with little consideration for modern cyber threats. Early SCADA protocols were proprietary and lacked strong security controls, and even today many systems still operate with minimal authentication or encryption. When these systems are connected to corporate networks or the internet for convenience, they become exposed to external attackers who can exploit unpatched software or insecure interfaces.

A second vulnerability involves the increasing convergence of IT and OT networks. Historically, SCADA systems operated in isolated environments, but modern organizations integrate them with business networks to improve efficiency and data analytics. This creates new attack pathways. A compromise in the IT environment such as a phishing attack or malware infection can spread into the OT network and disrupt physical operations. Unauthorized access to software and insecure packet-level communication are major threats, especially when organizations assume physical isolation or VPNs alone provide adequate protection.

A cyberattack on a SCADA system can have severe consequences for organizations and society. At the organizational level, an attacker could shut down production lines, disable safety controls, or corrupt operational data, leading to financial losses and operational downtime. At the infrastructure level, disruptions could affect entire communities. For example, an attack on a water treatment facility could alter chemical dosing, resulting in unsafe drinking water. A compromise in the energy sector could cause blackouts, damaged equipment, or destabilize grid operations. Because critical infrastructure is interdependent, a failure in one sector can cascade into others transportation, healthcare, communications, and emergency services all rely on stable energy and water systems. These impacts demonstrate why SCADA security is not just a technical issue but a national security concern.

To improve the security and resilience of SCADA systems, organizations must adopt a layered and proactive cybersecurity strategy. Network segmentation is essential; separating IT and OT networks reduces the likelihood that an attacker can move laterally across systems. Strong authentication and access controls help ensure that only authorized personnel can interact with SCADA interfaces. Regular patch management and system updates address vulnerabilities in aging software and hardware. Continuous monitoring, intrusion detection systems, and anomaly detection tools allow organizations to identify suspicious activity early. Encryption of data in transit protects communication between sensors, controllers, and operator stations. Finally, organizations should conduct regular risk assessments, tabletop exercises, and incident response planning to prepare for potential disruptions.

SCADA systems are foundational to the operation of critical infrastructure, but their importance also makes them attractive targets for cyber adversaries. By understanding the vulnerabilities inherent in these systems and implementing strong security controls, organizations can reduce risk and strengthen the resilience of essential services. As cyber threats continue to evolve, protecting SCADA environments will remain a central challenge in the broader mission of cybersecurity and national infrastructure defense.

 

References

SCADA Systems. (n.d.). Supervisory Control and Data Acquisition (SCADA) systems overview. Course material provided in class.

Writing Sample 3: The Human Factor in Cybersecurity

In cybersecurity, the human factor refers to the behaviors, decisions, habits, and psychological tendencies that influence the security of information systems. Even with advanced technical safeguards, human users remain one of the most vulnerable components of organizational security. Chapter 5 of Aldabagh, Bowman, Kirkpatrick, Oesteraas, and Yalpi (2025) emphasizes that many common cyber threats including phishing, ransomware, identity theft, and espionage succeed because attackers exploit predictable human behaviors rather than technical flaws.

How Human Behavior Contributes to Cybersecurity Vulnerabilities

Human behavior contributes to cybersecurity vulnerabilities when individuals unintentionally weaken security controls or expose sensitive information. People often prioritize convenience, speed, or routine over security. For example, employees may reuse passwords, click suspicious links, or bypass security protocols to save time. Aldabagh et al. (2025) note that cybercriminals frequently rely on psychological manipulation, social pressure, and emotional triggers to deceive users, making human error a central factor in cyber incidents.

Stress, urgency, and cognitive biases also influence decision-making. Attackers understand these tendencies and design threats such as urgent phishing emails or impersonation scams to exploit them. The Cybercrime and Cybersecurity presentation reinforces this point by showing how cybercrime has evolved from simple hacking to sophisticated global operations that rely heavily on manipulating human behavior.

Examples of Human-Related Cybersecurity Risks

Phishing and Social Engineering — Phishing remains one of the most common human-related cybersecurity risks. Attackers craft messages that mimic legitimate communication and use emotional triggers such as fear, urgency, or authority. Aldabagh et al. (2025) identify phishing as a primary vector for financial fraud, ransomware deployment, and identity theft. When individuals click malicious links or provide credentials, attackers gain access without needing to bypass technical defenses. This tactic succeeds because it targets human trust and emotional responses.

Weak Passwords and Poor Authentication Practices — Weak or reused passwords are another major human-driven risk. Many users choose simple passwords for convenience or reuse the same password across multiple accounts. Chapter 5 explains that credential-based attacks, including credential stuffing and brute-force attempts, remain effective because of poor password hygiene (Aldabagh et al., 2025). Even when organizations implement strong authentication policies, employees may write passwords down, share them, or store them insecurely, creating additional vulnerabilities.

Reducing Human-Related Cybersecurity Risks

Organizations can reduce human-related cybersecurity risks by addressing behavior, awareness, and culture not just technology.

Security Awareness Training — Effective training helps employees recognize threats such as phishing, ransomware, and social engineering. Aldabagh et al. (2025) emphasize that training must be ongoing, realistic, and grounded in real-world examples. Scenario-based learning and phishing simulations improve retention and encourage secure habits.

Clear Policies and Communication — Policies must be clear, accessible, and aligned with actual workflows. When policies are overly complex or unrealistic, employees are more likely to ignore them. Clear communication about expectations, procedures, and consequences reinforces secure behavior and reduces confusion.

Organizational Culture — A strong security culture encourages employees to view cybersecurity as part of their everyday responsibilities. Leadership plays a major role in shaping this culture. When leaders model secure behavior and support employees, individuals feel more comfortable reporting suspicious activity or admitting mistakes. Interdisciplinary cooperation including law enforcement, engineers, and cybersecurity professionals is essential for building resilient systems and reducing human-related risks.

Psychological, Social, and Organizational Influences on Cybersecurity Behavior

Cybersecurity behavior is shaped by multiple factors:

• Psychological influences: cognitive biases, stress, workload, and emotional triggers affect how people respond to cyber threats.
• Social influences: authority, peer behavior, trust, and social norms can encourage compliance with malicious requests or discourage reporting incidents.
• Organizational influences: leadership attitudes, communication style, policy design, and workplace climate determine whether employees feel empowered to make secure decisions.

Aldabagh et al. (2025) emphasize that cybercriminals exploit these factors to carry out financial crimes, ransomware attacks, identity theft, and espionage. Understanding these influences helps organizations design interventions that align with real human behavior rather than assuming employees will always act rationally.

Conclusion

The human factor is central to cybersecurity. While technology provides essential defenses, human behavior often determines whether those defenses succeed or fail. By analyzing how people think, act, and interact within digital environments, organizations can better anticipate vulnerabilities and design strategies that reduce risk. Training, communication, and culture all play critical roles in shaping secure behavior. Ultimately, cybersecurity is strongest when it integrates both technical controls and an understanding of human psychology.

 

References

Aldabagh, S., Bowman, J., Kirkpatrick, L., Oesteraas, T., & Yalpi, R. (2025). Common cybersecurity threats (Chapter 5). Self-Published.

Parsons, K., McCormac, A., Butavicius, M., Pattinson, M., & Jerram, C. (2014). The human aspects of information security questionnaire (HAIS-Q). Computers & Security, 42, 165–176.

Stanton, J. M., Stam, K. R., Mastrangelo, P., & Jolton, J. (2005). Analysis of end-user security behaviors. Computers & Security, 24(2), 124–133.

Workman, M. (2008). Wisecrackers: A theory-grounded investigation of phishing and pretext social engineering threats to information security. Journal of the American Society for Information Science and Technology, 59(4), 662–674.