LearnViz CompSci
Home / Learn / Security & Cryptography / CIA Triad

Beginner Topic 1 of 51 Security & Cryptography

CIA Triad

Confidentiality, integrity and availability goals of security.

How it works

The CIA triad is the foundation model of information security, made of three goals: confidentiality, keeping information from unauthorized people through encryption and access control; integrity, ensuring data is accurate and unaltered through hashes, signatures and permissions; and availability, ensuring systems and data are accessible when needed through redundancy, backups and protection from attacks. Security decisions are weighed against all three, and sometimes they conflict.

Step-by-step walkthrough

  1. Confidentiality: only authorized people can read the data.
  2. Integrity: data cannot be changed without detection.
  3. Availability: the data and service are there when needed.
  4. Encryption mainly protects confidentiality, hashes and signatures protect integrity.
  5. Backups and redundancy protect availability, and a good design balances all three.

Where it is used

Risk assessments, security policies, compliance frameworks and incident analysis use the triad. A ransomware attack hits availability and integrity, and a data leak hits confidentiality.

Common pitfall

Focusing on confidentiality alone leaves systems fragile or unusable. Overly strict controls can damage availability, while ignoring integrity lets silent tampering go unnoticed. Add related properties such as authenticity and non-repudiation where needed. For each asset, ask which of the three matters most and what failure would cost.

Where it fits in the course

CIA Triad is topic 1 of 51 in Security & Cryptography, rated Beginner. It is the first topic in this area. The next topic is Threats and Vulnerabilities.

Practice and explore

How to study this topic

  1. Read the explanation above and restate the definition in your own words.
  2. Open the interactive lesson and answer its mini quiz.
  3. Read the common pitfall, then write a short example that avoids it.
  4. Check your understanding in the Security & Cryptography quiz, and revisit the topic if you miss a question.

Frequently asked questions

What is CIA Triad?
Confidentiality, integrity and availability goals of security. It belongs to Security & Cryptography and is a beginner-level topic.
Where do people use CIA Triad?
Risk assessments, security policies, compliance frameworks and incident analysis use the triad.
What is the most common mistake with CIA Triad?
Focusing on confidentiality alone leaves systems fragile or unusable.
What should I learn before this topic?
Nothing earlier in Security & Cryptography is required. This is where the area begins.
How can I practice it?
Answer the mini quiz in the interactive lesson, then take the Security & Cryptography quiz.
Is CIA Triad hard to learn?
It is a Beginner topic, so it works as an entry point. If the terms are new, read the explanation twice and try the visualizer before the quiz.
How long does it take to learn CIA Triad?
Most learners can read the explanation and finish the interactive lesson in under an hour. Fluency comes from applying the idea, so plan a few short practice sessions with the quiz.
Which topics are related to CIA Triad?
Threats and Vulnerabilities, Passwords and Hashing, Salting are closely connected. The full list is in the related topics section of this page.
What should I study after CIA Triad?
Continue with Threats and Vulnerabilities, the next topic in Security & Cryptography.

Related topics