In 80 words or more provide examples for security controls for each leg of the CIA (confidentiality, integrity, availability) Triad? And which does Ransomware impact?

Assignment Brief

• Triad?
• Which does Ransomware impact?
• What are the security controls (i.e., countermeasures/safeguards) to prevent or minimize the impact of a successful Ransomware attack?

Sample Answer

CIA Triad & Security Controls

The CIA Triad stands for Confidentiality, Integrity, and Availability, three core principles in information security. Each leg plays a critical role in protecting digital information.

1. Confidentiality

Confidentiality ensures that only authorised individuals can access sensitive data.

Examples of security controls:

• Encryption: Protects data in transit and at rest, ensuring that intercepted information cannot be read without the correct decryption key.

• Access Controls: Role-based access control (RBAC) and multi-factor authentication (MFA) ensure only authorised users can view or interact with specific data.

• Network Segmentation: Limits exposure by isolating sensitive data from general network access.

2. Integrity

Integrity ensures data is accurate and has not been tampered with.

Examples of security controls:

• Hash Functions: Algorithms like SHA-256 generate a unique hash value to detect data alterations.

• Digital Signatures: Validate the source and integrity of a message or file.

• Audit Logs: Keep track of changes and access, helping identify unauthorised modifications.

3. Availability

Availability ensures that data and systems are accessible when needed.

Examples of security controls:

• Redundancy: Backup servers, storage, and internet connections prevent downtime.

• Disaster Recovery Plans (DRP): Ensure continuity of service in the event of system failures.

• DDoS Protection Services: Help mitigate large-scale attacks aimed at overwhelming a system.

Impact of Ransomware on the CIA Triad

Ransomware primarily impacts Availability, as it encrypts files and renders systems unusable until a ransom is paid. However, it can also threaten Confidentiality if data is exfiltrated, and Integrity if files are permanently altered or deleted.

Security Controls Against Ransomware

To prevent or minimise the effects of a ransomware attack, organisations should implement the following:

• Regular Data Backups: Offline and cloud-based backups enable restoration without paying a ransom.

• Endpoint Protection: Anti-malware and antivirus software detect and block malicious files.

• User Training: Educating staff to avoid phishing emails and suspicious links significantly reduces risk.

• Patch Management: Keeping systems and applications updated to fix known vulnerabilities.

• Network Segmentation: Limits the spread of ransomware to critical systems.

• Access Controls: Using least-privilege principles to prevent unnecessary access.

By applying layered security controls across the CIA triad, organisations can better defend against ransomware and maintain operational resilience.

Continued...