Concept in 60 seconds: the CIA triad Almost every information security control protects one (or more) of three things: - Confidentiality: only the right people can see the data. Think encryption and access permissions. - Integrity: the data is accurate and hasn't been changed without authorisation. Think hashing, input controls and change logs. - Availability: systems and data are there when needed. Think backups, redundancy and disaster recovery plans. A ransomware attack hits availability (and often confidentiality too). Someone quietly editing payroll rates is an integrity problem. Email…
Study wall
What I Studied This Week
Share what you covered, what finally clicked, what tripped you up — and, after your exam, what you'd tell the next candidate. Text only, kind words, no exam questions.
Share your week with other CPA candidates
Reading is open to everyone. To post, sign in or create a free account.
Sign in to post