CIA Triad & The Authentication vs Authorization

The CIA Triad, also called AIC, stands for confidentiality, integrity, and availability, the three essential concepts in cyber security. These three principles serve as a mainframe for developing proper working security processes within cybersecurity.

Confidentiality ensures that sensitive information is only accessible to those authorized to view it. Confidentiality is the essence of protecting information from breaches or unauthorized access.
Integrity refers to ensuring that the data we send and receive remains intact, accurate, and consistent throughout the process. It also ensures that the information in the data is protected from unauthorized changes as it gets transferred.

Availability ensures that the data we need is accessible when we need it. It is essential to ensure that all services or applications always function correctly. Backing up data, having backup power, and conducting regular maintenance are some of the many measures we take to ensure that our data is always available.

Authentication refers to confirming one’s identity to ensure that only those with permission can access data. The best example is our phone’s several authentication options —fingerprint, facial recognition, or password. Another one is Two-Way Factor Authentication. This authentication is widely used by adding an extra layer of the
authentication process on top of the regular password authentication requirement.

Authorization refers to the information one’s credential is allowed to access. After a successful authentication process, one will have access to the information that was explicitly granted to them based on their credentials or what is necessary based on their role within the organization. Some information that is available to the customer service
department that deals with customers’ financials may not be available to other departments that don’t require the same information to function.

Leave a Reply

Your email address will not be published. Required fields are marked *