What does the 'C' in CIA triad stand for?

A. Certification
B. Calculation
C. Confidentiality
D. Compliance

Answer: C. Confidentiality
Explanation:

Confidentiality ensures that sensitive information is not disclosed to unauthorized individuals, entities, or processes.

• The Goal: Protecting data from being "viewed" or "stolen" by the wrong people.

• Common Controls: Encryption (at rest and in transit), Access Control Lists (ACLs), and Multi-Factor Authentication (MFA).

• The Threat: Examples include shoulder surfing, social engineering, and man-in-the-middle attacks.

Comparison with the Distractors

• A. Certification: This is an administrative process used to formally evaluate a system's technical and non-technical security controls. It is a component of a larger security program but not a pillar of the triad.

• B. Calculation: This is not a standard term in information security frameworks.

• D. Compliance: While the CIA triad helps you achieve compliance (meeting laws like GDPR or HIPAA), compliance is a regulatory requirement rather than a core security principle.