SECAI Core · phase 8 of 15
CIA Triad
Three principles of security control and management. Also known as the information security triad. Also referred to in reverse order as the AIC triad.
The Explain card
- Plain English
- The CIA Triad names the three core goals of security: confidentiality (only the right people see data), integrity (data and systems are not tampered with) and availability (services work when needed). Some sources order it AIC.
- Example
- For a medical-advice chatbot, confidentiality means patient conversations do not leak; integrity means nobody poisons the training data or retrieval corpus to give dangerous advice; availability means the service stays up when clinicians rely on it.
- Why it matters
- Every AI security control maps to at least one of these goals. When you assess a new model deployment, walking through C, I and A is the fastest way to spot what you have forgotten.
- Hook
- Secret, correct, and switched on.
Where it sits in the deck
Phase 8: Governance, Risk, and Compliance Frameworks
Individual controls need a governance envelope — introduce the risk and compliance structures, standards bodies, and regulations that frame AI accountability at scale.
