What Is Cybersecurity? (The CIA Triad)

Relax. We'll talk through this in plain words — no textbook voice.

What you'll walk away with

Understand what cybersecurity (the CIA Triad) is, without any of the intimidation
Apply this concept right away in real-world scenarios
Learn to avoid security risks for both yourself and others

Let's think about this for a second

You can explain almost every security decision through the CIA Triad's three fundamentals. Confidentiality means only authorized people can read the data (passwords, encryption). Integrity means data stays accurate and unaltered — unauthorized changes are blocked. Availability means the system/data is accessible whenever it's needed (backups, redundancy). Every attack aims to break one of these three.

Let's connect this to a real scenario

Take a banking app — the login password protects Confidentiality, preventing your transaction history from being altered without permission protects Integrity, and keeping the app accessible 24/7 through redundant servers protects Availability. A ransomware attack targets Availability (encrypting your files and locking you out), while a data leak targets Confidentiality.

Confidentiality — only authorized people can read it
Integrity — data stays accurate and unaltered
Availability — accessible whenever it's needed

Let's walk through it together

text

CIA Triad
---------
Confidentiality  → Password, Encryption, Access Control
Integrity        → Checksums, Version Control, Audit Logs
Availability     → Backup, Redundancy, DDoS Protection

You should see

Given an attack, you'll be able to identify which part of the CIA Triad it's targeting.

Try it in 5 minutes

Pick an app you use regularly (email, banking, social media) and write down how it implements each of Confidentiality, Integrity, and Availability.

A quick word of caution

Don't treat security as a 'set it up once and you're done' thing — attackers keep changing their methods, so you need to keep reassessing.

Easy traps

Thinking Confidentiality alone is 'security' and forgetting about Integrity and Availability
Assuming security is solely the IT team's job — every user's everyday habits matter too

Now try it yourself

Pick an app you use regularly (email, banking, social media) and write down how it implements each of Confidentiality, Integrity, and Availability.

You'll know it worked when: Given an attack, you'll be able to identify which part of the CIA Triad it's targeting.