What are the core principles of the CIA triad, and how do they apply to IT management?

• A. Confidentiality, Integrity, Availability; guide data protection strategies, ensure data accuracy, and keep systems accessible to authorized users.
• B. Confidentiality, Availability, Integrity; these principles apply to data access and uptime.
• C. Privacy, Integrity, Availability; these principles refer to privacy rights.
• D. Confidentiality, Integrity, Accessibility; ensure always accessible to anyone.

Answer: (A)

The CIA triad—Confidentiality, Integrity, and Availability—is the guiding framework for IT management. Confidentiality means information is accessible only to those with permission, so controls like access management and encryption are used to prevent leakage. Integrity ensures data remains accurate and unaltered unless properly authorized, which is supported by checksums, digital signatures, audit trails, and change controls. Availability means information and systems are ready to use when needed, so redundancy, backups, disaster recovery, and reliable monitoring keep services up and responsive.

The best choice reflects these three principles and ties them to practical outcomes: protecting data, keeping it accurate, and ensuring authorized users can access systems when needed. It also avoids common mix-ups found in other options—privacy is not the same as confidentiality, and accessibility implies open access rather than restricted, authorized access.