The official objectives of cybersecurity are generally summarized by the CIA Triad, which stands for Confidentiality, Integrity, and Availability. These three core principles form the foundation of all cybersecurity strategies, policies, and frameworks worldwide.
Here’s a detailed breakdown:
🔒 1. Confidentiality
Objective: To ensure that sensitive information is accessible only to authorized individuals and entities.
Explanation: Protects data from unauthorized access, disclosure, or theft.
Examples:
- Using encryption to protect files or network communications
- Implementing user authentication (passwords, biometrics, 2FA)
- Access control policies and permissions
⚙️ 2. Integrity
Objective: To ensure that data and systems are accurate, consistent, and unaltered except by authorized users.
Explanation: Protects against unauthorized modification or corruption of information.
Examples:
- Using checksums and hashing (e.g., SHA-256) to verify data integrity
- Version control and audit trails
- Digital signatures and secure backups
🌐 3. Availability
Objective: To ensure that systems, networks, and data are accessible and functional when needed by authorized users.
Explanation: Prevents downtime or service disruptions caused by cyberattacks or failures.
Examples:
- Redundant systems and failover mechanisms
- Regular system maintenance and patching
- Protection against Denial-of-Service (DoS) attacks
🛡️ Extended Modern Objectives
In modern cybersecurity frameworks, especially under NIST, ISO 27001, and CIS, the CIA Triad is often expanded with additional objectives:
| Objective | Description |
|---|---|
| Authenticity | Ensuring that users, systems, and data are genuine and verified. |
| Accountability | Tracking user actions and maintaining audit logs to ensure traceability. |
| Non-Repudiation | Ensuring that actions or transactions cannot be denied after they occur (e.g., digital signatures). |
| Resilience | Ensuring the ability to recover and continue operations after a cyber incident. |
✅ Summary
The official core cybersecurity objectives are:
- Confidentiality
- Integrity
- Availability
Additional extended goals include: Authenticity, Accountability, Non-repudiation, and Resilience.
