Cybersecurity Foundations (Grades 9–12) · lesson 1 of 7 · 12 min
What is the CIA Triad? The CIA Triad is the foundational model of information security. Every security decision maps back to one or more of its three pillars: Confidentiality , Integrity , and Availability . Confidentiality Confidentiality means that information is accessible only to those who are authorized to see it. Techniques include encryption, access controls, and need-to-know policies. A breach of confidentiality is a data leak — someone reads data they should not. Integrity Integrity means data is accurate, complete, and has not been tampered with. Hashing, digital signatures, and audit logs protect integrity. A breach of integrity means data was altered — either by an attacker or by accident. Availability Availability means systems and data are accessible when authorized users need them. Redundancy, backups, and DDoS protection support availability. A breach of availability is a denial-of-service attack or hardware failure that takes a system offline. Real-world example: A hospital’s patient records must be confidential (only doctors see them), have integrity (dosages must be correct), and be available (doctors need them 24/7). All three pillars matter equally.
CIA Triad check
An attacker encrypts a company’s files and demands payment to restore access. Which CIA pillar is primarily violated?
- Confidentiality
- Integrity
- Availability
- Authentication
Answer: Availability
Ransomware denies access to data — that is an availability attack. The data may not be read or altered, just locked.
A developer accidentally overwrites a production database with test data. Which pillar is violated?
- Confidentiality
- Integrity
- Availability
- Non-repudiation
Answer: Integrity
The data is now inaccurate — an integrity violation. It does not matter that it was accidental rather than malicious.
Which control primarily protects confidentiality?
- Encryption at rest
- RAID storage arrays
- Hash verification
- Load balancing
Answer: Encryption at rest
Encrypting stored data ensures that even if someone gains physical access to the drive, they cannot read the contents.
Back to Cybersecurity Foundations (Grades 9–12)
Next lesson: Defense in depth