Term

​>> As we get through the content on the security, ​there are a number of terms that we're going to see, and ​these terms come up time and again as we go through the content. ​Keep an eye out for where these appear later in the course. ​So the first thing we're going to talk about is the CIA triad. ​Often, you'll see it stacked like a triangle where you have confidentiality, ​integrity, and availability. ​These topics come up time and again throughout cybersecurity. ​In fact, we're going to see this when we dive into looking at how do we calculate ​the impact of a particular vulnerability? ​So in the CIA triad, we have confidentiality.

Definition

Term

​This is basically just keeping secret things secret. ​You don't want some third party having access to the content and so ​you encrypt it or you keep that secret. ​We use encryption to protect confidentiality and ​we're going to see this more later on. ​We also have integrity. ​Integrity is making sure that the data does not change. ​Whether or not you wanted it to be changed, ​you're protecting it from unauthorized changes or accidental changes. ​You're on the lookout for if that information has changed, ​that is protecting the integrity of data.

Definition

Term

​And then the third part of the CIA triad is availability. ​Availability on the CIA triad is all about making sure that the data is ​there when you need it or the service is available when you need it. ​The information and ​the service is available to you whenever you're ready for it. ​This is the CIA triad, and ​it largely undermines a lot of what we do in cybersecurity. ​In fact, whenever you go to the news and ​you read about some new cyber-attack that comes out, check out and ​see that there has been a failure of at least one of these three topics. ​Sometimes it's two, could be all three, but keep a lookout for it. ​Every cybersecurity incident is a failure of at least one side of the CIA triad.

Definition