CIA triad CIA
The three goals every security control is trying to protect: confidentiality (only the right people can see it), integrity (it hasn't been altered), and availability (it's there when you need it).
For small firms
When you're evaluating any security tool or decision, ask which leg of the triad it's actually protecting — it clarifies whether it's solving your real problem.