Information Security and the CIA Triad: Cyber Security Fundamentals

Posted on Oct 27, 2026 in Business Administration and Innovation Management

Week 3

Concept of Information Security and the CIA Triad

Information Security: protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

  • Confidentiality: our ability to protect our data from those who are not authorized to view it.
  • Integrity: our ability to prevent our data from being changed in an unauthorized or undesirable manner.
  • Availability: the ability to access our data when we need it.

The Growing Importance of Information Security

  • Growing Digital Dependence
  • Rising Cyber Threats
  • AI-Driven Threats
  • Sensitive Data at Risk
  • Government and Critical Services Targeted
  • Financial and Operational Impact

UAE Cyber Crime Law Purposes

  • Prevent cybercrime
  • Protect individuals and organizations
  • Protect national security
  • Deter offenders
  • Build trust in the digital environment


Forms of Information

Written, electronic, oral

Assets: services, information, facilities, programs

Ways to Protect Information

Managerial + Technical + Physical Protection = Strong Information Security

General Data Protection Regulation (GDPR)

GDPR is the European Union regulation that protects individuals and their personal data.

Individuals have rights such as accessing, correcting, deleting, restricting, and transferring their personal data.

Global Cyber Security Index (GCI)

  • The GCI is an international benchmark issued by the International Telecommunication Union (ITU) to measure each country’s readiness against cyber threats.
  • The index assesses a country’s ability to detect, respond to, and investigate cyber incidents effectively.

GCI Pillars:

  1. Legal
  2. Technical
  3. Organizational
  4. Capacity Development
  5. Cooperation


Concept of Cyber Security

The term cyber comes from cybernetics. Cyber security is the protection of digital systems, networks, devices, and databases from cyberattacks, security breaches, and threats.

The Importance of Cyber Security:

  1. Protection of personal data
  2. Protection of critical infrastructure
  3. Ensuring business continuity
  4. Maintaining trust between companies and customers
  5. Protecting individuals from extremist and harmful ideas

NIST Cybersecurity Framework (CSF)

The CSF is a flexible framework developed by the U.S. National Institute of Standards and Technology (NIST) to help organizations manage cybersecurity risks.

NIST CSF 2.0 Consists of Six Interconnected Core Functions

  1. Govern
  2. Identify
  3. Protect
  4. Detect
  5. Respond
  6. Recover


Risk Management Process:

  1. Identify assets
  2. Identify threats
  3. Assess vulnerabilities
  4. Assess risks
  5. Mitigate risks

Data Classification and Document Labeling Policy

  1. Public: This information could be freely disseminated, resulting in a negligible impact on ICA, its stakeholders, its partners, and/or its customers.
    Examples: office opening times, public reports, and events
  2. Restricted: Information should be restricted when unauthorized or accidental disclosure, alteration, or destruction of that information could result in an adverse impact.
    Examples: personal contact details, policies
  3. Confidential: Information should be classified as confidential when unauthorized disclosure, alteration, or destruction of that information could result in a serious impact.
    Examples: employee records, salary-related information
  4. Highly Confidential: Information should be classified as HIGHLY CONFIDENTIAL when unauthorized or accidental disclosure, alteration, or destruction of that information could result in a catastrophic impact.
    Examples: unpublished strategic plans, proprietary information