BLUF
The CIA Triad is a framework for protecting sensitive information through Confidentiality, Integrity, and Availability. Authentication verifies identity while Authorization grants access based on verified identity

The CIA Triad
The CIA Triad is a model used in information security to ensure the confidentiality, integrity, and availability of information. The CIA Triad is a cornerstone of information security management and refers to the three main objectives of security. The first objective is confidentiality which consists of protecting sensitive information from unauthorized access and disclosure. Confidentiality ensures that only authorized personnel will have access to the information. The second objective is integrity which involves ensuring that the information is accurate, consistent, and trustworthy and that it cannot be altered without authorization. It ensures that the information is protected from unauthorized modification or destruction. The last objective is availability. Availability consists of ensuring that information is accessible and usable by authorized users when they need it. It makes sure that the information is available and that systems and applications are functioning properly and as intended. According to Chai, there are a few challenges for the Triad, such as big data. This is due to the large volume of information that needs to be protected in an organization. The other mentioned weaknesses have to deal with the internet of things in regard to privacy and security. (2022)

Authentication Vs Authorization
Authentication and authorization or two separate but related concepts when it comes to cyber security. Authentication is a process of verifying that a person or system is what they claim to be. There are multiple different types of authentication, such as passwords or security questions. The system will check if the password or security questions that were entered match the correct credentials then it will grant access to the user. Authorization is the process of granting or denying access to specific resources based on the authenticated identity. A common type of authorization is an Access Control List which determines which individuals may gain access to a specific digital environment. According to OneLogin, “Authentication verifies the identity of a user or service, and authorization determines their access rights.”(Authentication Vs. Authorization: What’s the Difference? | OneLogin, n.d.) A good example of the difference between authentication and authorization is when accessing your bank’s website. First, the website authenticates you using your username and password. After you have been authenticated, the website will use authorization to determine what actions you are allowed to perform on the account, such as being allowed to view the account balance but not being able to transfer funds or change personal information.

Conclusion

In conclusion, the CIA Triad and the concepts of Authentication and Authorization are critical components in ensuring the security of sensitive information in an organization. By utilizing these concepts, organizations can safeguard their information and prevent unauthorized access, modification, or theft. Effective implementation of the CIA Triad and proper authentication and authorization practices is essential for maintaining the security of information systems in today’s increasingly digital world.

References
Authentication vs. Authorization: What’s the Difference? | OneLogin. (n.d.). Retrieved January 28, 2023, from https://www.onelogin.com/learn/authentication-vs-authorization

Chai, W. (2022, June 28). Confidentiality, integrity and availability (CIA triad). WhatIs.com. Retrieved January 28, 2023, from https://www.techtarget.com/whatis/definition/Confidentiality integrity-and-availability-CIA