[incomingpain]

As a security guy, we are taught the CIA triad early and it's easy to forget.

The A stands for availability and if you don't make things available, you're failing at your own job.

[microjim]

Well, that depends. You certainly want to ensure the availability of the information under your remit isn't compromised by a threat actor, but reducing your attack surface by, say, shutting down external internet access is certainly a valid mitigation in some circumstances.

[zasdffaa]

CI = ??

[zweifuss]

I didn't know either, so I looked it up: The three initials stand for the three most important IT protection goals, often referred to as the "pillars of data security":

Confidentiality,

Integrity,

Availability.

There are other IT protection goals, including authenticity, privacy, reliability, and (non)repudiation.

[microjim]

>authenticity, privacy, reliability, and (non)repudiation.

These fall under integrity, confidentiality, availability, and integrity respectively! The CIA triad is pretty comprehensive!

[doubled112]

I think CIA covers everything in the list, right?

Authenticity and non-repudiation falls under integrity.

Privacy falls under confidentiality.

Reliability in context is another word for availability.

[easton]

Confidentiality, Integrity