There are seven expanded categories to the C-I-A Triad. They include: Confidentiality, Integrity, Availability, Accuracy, Authentication, Utility and Possession. By understanding all seven expanded areas of the C-I-A Triad there is a better chance of keeping your information secure.
Confidentiality is ensuring the authorized access. The goal of confidentiality is to ensure restricted access and only authorized people are to be allowed to access the secure data. A breach of confidentiality may take place through different means, for instance hacking or social engineering data. An example of a violation of confidentiality is Salami Theft. A person knows he can’t steal the entire salami without it being noticed. By taking small pieces over time that person has the entire salami. In information security, this occurs when an employee steals a few pieces of information over time. Taking more would be noticed, but eventually the employee gets the entire information. To protect the confidentiality of information, you can use a number of measures. It can be accomplished by classifying data and implementing security policies, user names, passwords, access control lists, and both file and volume encryption. Protection is from firewalls, file permissions, education of information custodians and end users.
Integrity is to protect data from modification or deletion by unauthorized parties, and ensuring that when authorized people make changes that shouldn’t have been made the damage can be undone. The goal is to maintain data without any illegal data modifications or data corruption. There are two points during the transmission process during which the integrity could be compromised: during the upload or transmission of data and during the storage of the document. Depending on the size of the network, hubs, routers and additional firewalls will help with the security of the