Where does it start?
Security cannot be an afterthought

Security -- simply mentioning the word to some people is enough to make their bodies shiver.  If you ask these people at what point in their process is security involved, most will answer "not until the end."  Remember the old addage, "closing the barn door after the horse escapes?"  There are others of course that would work here but you get the point.  Security should be integrated through out your process. 

Availability  
Quite a few people believe this only refers to data -- ensure that the data is available to the user for access.  Well, data is included but availability also refers to authorized system accessibility; backup, fault tolerance controls.  Also included is the possible loss of data either by natural or man made actions.

Integrity
To maintain Integrity is to guard against the unauthorized alteration or modification of data.  How is this done?  Through the use of protection mechanisms such as access controls, rotation of duties, etc.  Imbedding safeguards to guard against any unauthorized modifications by authorized personnel or processes.  Think in terms of data consistency.

Confidentiality
Confidentiality differs from Integrity in that it focuses on the protection of inforrmation from unauthorized personnel.  This is done through controls as well, which include user identification, authentication and authorization.  Prevention mechnisms guard against the disclosure of unauthorized data.  Most of us think of hackers when we think of a breach but surprisingly a considerable amount of data is compromised by someone you know using social engineering techniques.   You might know someone who engages in social engineering: always be vigilant!

If you have rarely enjoyed all three branches of the triad at the same time, give us a call at 301-423-9177, or use our "Contact" page, and we will discuss what we can do for you.