What does the CIA triad mean?

CIA triad is a basic model in information and network security that describes three key properties of information protection:

C - Confidentiality I - Integrity A - Availability

This triad answers the main question: what should protected information and a system look like?

#1. Confidentiality

What it means: Information must be accessible only to those who are authorized.

#Examples for confidentiality:

• Only the account owner sees the password
• Messenger conversations are inaccessible to outsiders
• Company data is not read by attackers

#How it's ensured:

• authentication (login + password),
• access rights separation,
• encryption (HTTPS, VPN).

A breach of confidentiality is a data leak.

---

#2. Integrity

What it means: Data must not be changed or replaced without authorization.

#Examples for integrity:

• The amount in a bank transfer doesn't change along the way
• A file downloads without corruption
• System logs are not forged

#How it's ensured:

• checksums,
• digital signatures,
• change control.

A breach of integrity is data tampering or corruption.

---

#3. Availability

What it means: Information and services must be available when they are needed.

#Examples for availability:

• The website opens without failures
• Mail works 24/7
• The server doesn't "crash" under load

#How it's ensured:

• backups,
• fault tolerance,
• DDoS protection.

A breach of availability is denial of service.

---

#A simple way to remember

You can remember it like this:

• Confidentiality - who can read it
• Integrity - what wasn't changed
• Availability - always works

---

#Short answer for the interview

Ready-made answer:

The CIA triad is an information security model that includes confidentiality, integrity, and availability of data. It describes the basic requirements for a protected system.