The CIA Triad of Information Security encompasses the following related people, process and technology objectives: CLO 1, 4

Question

BlackTom AI · Accepted Answer

CIA Triad stands for Confidentiality, Integrity, and Availability — the foundational model for information security that aligns people, processes, and technology objectives.

1. Relevant knowledge points and concepts
- Confidentiality: Ensuring information is accessible only to authorized users (e.g., access controls, encryption, need-to-know policies).
- Integrity: Ensuring information is accurate and unaltered (e.g., hashing, checksums, version control, change management).
- Availability: Ensuring authorized users can access information and resources when needed (e.g., redundancy, backups, disaster recovery, capacity planning).
These three pillars guide security controls across people (training, roles, least privilege), processes (policies, incident response, change control), and technology (firewalls, encryption, RAID).

2. Step-by-step reasoning
Step 1: Recognize the classic definition from information security literature: the CIA Triad is the standard mnemonic for Confidentiality, Integrity, Availability.
Step 2: Map each word to the people/process/technology objectives:
  - Confidentiality (people: training and authorization; process: access control policies; technology: encryption, IAM).
  - Integrity (people: change approval; process: versioning and validation; technology: checksums, digital signatures).
  - Availability (people: on-call staff; process: recovery plans; technology: load balancing, backups).
Step 3: Compare the choices: pick the option that exactly matches the recognized triad.

3. Intermediate steps (concept mapping)
- Identify common terms used in security curricula → Confidentiality, Integrity, Availability.
- Verify each term addresses a different objective (restrict disclosure, maintain correctness, ensure access).
- Confirm that the chosen option contains these three exact terms.

4. Why the correct answer is correct
Confidentiality, integrity, and availability together comprehensively cover preventing unauthorized disclosure, preventing unauthorized or accidental modification, and ensuring authorized access. This is the accepted, canonical CIA Triad used in secure system design and policy.

5. Why the other options are incorrect
- "Compliance, innovation, and accessibility": Compliance and innovation are organizational goals but do not form the security triad; accessibility is not the standard term (availability is).
- "Compliance, integration, and availability": Compliance and integration are not the traditional security pillars; integration is unrelated to the triad.
- "Confidentiality, inclusion, and accessibility": Inclusion and accessibility are important but differ from integrity and availability; inclusion is not part of the CIA model.

Conclusion: The correct answer is Confidentiality, integrity, and availability, which matches the provided answer.

The CIA Triad of Information Security encompasses the following related people, process and technology objectives: CLO 1, 4单项选择题

类似问题

Match each term relating to information security with its corresponding description. 1: Confidentiality 2: Integrity 3: Availability

Which component of the CIA triad refers to limiting access so only authorized users can view sensitive information?

Question at position 18 Which of the following are the three primary objectives of information security? (Select all that apply)IntegrityAvailabilityConfidentialityProfitabilityAnonymity

Question at position 12 Which of the following are the three primary objectives of information security? (Select all that apply)AnonymityConfidentialityAvailabilityProfitabilityIntegrity

Question at position 4 Which of the following are the three primary objectives of information security? (Select all that apply)AvailabilityProfitabilityIntegrityConfidentialityAnonymity

If a malicious actor succeeds in tampering with the data in a database so that it is no longer trustworthy, which CIA component has been compromised?

In the context of the CIA Triad, which component is specifically responsible for ensuring that data is private and that access is strictly controlled?

A loss of __________ is the unauthorized disclosure of information.

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单