CompTIA Exam Prep - ITF+, A+, Network+, Security+, CySA+

Confidentiality, integrity and availability are the three properties security exists to protect. Every control you will study maps to at least one of them, and the reason the triad is worth more than a definition is that the three pull against each other. Security work is mostly deciding which one wins. Confidentiality Only authorized parties can read the data. The controls that serve it: encryption of data at rest and data in transit ; access control and least privilege; strong authentication ; data classification, so that protection matches sensitivity; network segmentation; and physical controls, since an unattended screen defeats every cryptographic measure behind it. Typical failures are unencrypted backups, over-broad file share permissions, a misconfigured cloud storage bucket, and a laptop left in a car. Integrity Data is accurate and has not been altered without authorization — including by accident. Controls: cryptographic hashing to detect change; digital...