Feds Forget the "I" and "A" in Security's C-I-A

Most of us who have taught information security at one time or another have relied on the C-I-A mnemonic to help our students think of the multiple dimensions of information security. Confidentiality, Integrity and Availability are well understood to be the ways one should view the task of information protection.

But well over 90 percent of FedWorld dialogue about security of the U.S. government enterprise is about confidentiality â€" preventing unauthorized access to sensitive information â€" though the other two aspects are arguably more important.