What is the CIA triad in information security?

• A. Confidentiality, Integrity, and Availability
• B. Control, Investigation, and Authentication
• C. Compliance, Integrity, and Assessment
• D. Confidentiality, Integrity, and Applicability

Answer: (A)

The correct choice highlights the CIA triad, which is a fundamental concept in information security. The CIA triad consists of three key components: Confidentiality, Integrity, and Availability.

Confidentiality ensures that sensitive information is accessed only by authorized users, protecting data from unauthorized disclosure. Integrity involves maintaining the accuracy and consistency of data over its entire lifecycle, ensuring that information remains unaltered and trustworthy. Availability guarantees that information and resources are accessible to authorized users when needed, ensuring operational continuity.

These three principles are crucial for establishing a robust information security framework, as they provide a guideline for developing security policies, risk assessments, and countermeasures. Understanding and applying these concepts is essential for anyone working within the field of network security.

The other options present terms related to different aspects of security but do not capture the essence of the established CIA triad in the same way. For example, terms like Control and Investigation may relate to security management practices but do not encompass the foundational principles of protecting information. Likewise, while Compliance might pertain to following regulations, it is not one of the central tenets of the CIA triad.