What is the commonly used acronym for the three core information security goals?

What is the commonly used acronym for the three core information security goals?

• A. NIST
• B. CSF
• C. CIA Triad
• D. IAM

Answer: (C)

The main concept here is a simple, foundational set of goals that guide information security: protecting information so that it remains confidential, accurate, and available when needed. This trio is commonly called the CIA Triad. Confidentiality means information is accessible only to people or systems with proper permission. Techniques like encryption, strict access controls, and the principle of least privilege help ensure that sensitive data isn’t exposed to unauthorized parties. Integrity is about keeping data trustworthy and unaltered except by authorized changes. Mechanisms such as hashing, digital signatures, versioning, and robust change controls help detect and prevent tampering or corruption. Availability ensures that authorized users can access data and systems when they need them. This involves redundancy, backups, disaster recovery planning, and protections against outages or attacks that could disrupt access. This triad is the standard shorthand for describing the core goals of information security, which is why it’s the best answer. Other terms like NIST or CSF relate to security frameworks and standards for managing risk, rather than naming the three primary goals themselves, while IAM focuses on managing who can access resources rather than encapsulating the three goals.

The main concept here is a simple, foundational set of goals that guide information security: protecting information so that it remains confidential, accurate, and available when needed. This trio is commonly called the CIA Triad.

Confidentiality means information is accessible only to people or systems with proper permission. Techniques like encryption, strict access controls, and the principle of least privilege help ensure that sensitive data isn’t exposed to unauthorized parties.

Integrity is about keeping data trustworthy and unaltered except by authorized changes. Mechanisms such as hashing, digital signatures, versioning, and robust change controls help detect and prevent tampering or corruption.

Availability ensures that authorized users can access data and systems when they need them. This involves redundancy, backups, disaster recovery planning, and protections against outages or attacks that could disrupt access.

This triad is the standard shorthand for describing the core goals of information security, which is why it’s the best answer. Other terms like NIST or CSF relate to security frameworks and standards for managing risk, rather than naming the three primary goals themselves, while IAM focuses on managing who can access resources rather than encapsulating the three goals.