CORE

CIA triad CIA

The three goals every security control is trying to protect: confidentiality (only the right people can see it), integrity (it hasn't been altered), and availability (it's there when you need it).

For small firms

When you're evaluating any security tool or decision, ask which leg of the triad it's actually protecting — it clarifies whether it's solving your real problem.