SECAI Core · phase 8 of 15 · noun

CIA Triad

Three principles of security control and management. Also known as the information security triad. Also referred to in reverse order as the AIC triad.

The Explain card

Plain English
The CIA Triad names the three core goals of security: confidentiality (only the right people see data), integrity (data and systems are not tampered with) and availability (services work when needed). Some sources order it AIC.
Example
For a medical-advice chatbot, confidentiality means patient conversations do not leak; integrity means nobody poisons the training data or retrieval corpus to give dangerous advice; availability means the service stays up when clinicians rely on it.
Why it matters
Every AI security control maps to at least one of these goals. When you assess a new model deployment, walking through C, I and A is the fastest way to spot what you have forgotten.
Hook
Secret, correct, and switched on.

Word knowledge

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

On the threat-model worksheet for the retrieval chatbot, each row is scored against the CIA Triad before the architect assigns a control on the vector store.

Why these words
  • CIA English initialism of confidentiality, integrity, and availability packs three property names into one spoken label
  • Triad Late Latin trias, from Greek trias, a group of three, from treis, three supplies the head noun, a set of three, so the label is heard as one group
Where it came from
Origin
English information-security compound, from the initialism CIA (confidentiality, integrity, availability) and Late Latin trias, from Greek trias, a group of three
Entered the language
1990s
What changed
Triad had meant a group of three since the 1500s, then a three-note chord, then a secret society. CIA already named a US intelligence agency from 1947. Security textbooks in the 1990s reused those three letters for confidentiality, integrity and availability, and attached triad so the three properties would stick as one set.
How it is spelled
Pattern
CIA is three capitals with no points
Pattern
tri- from Greek treis keeps i, never y
Pattern
-ad from Greek -as names a numbered group
Breaks the pattern
the noun phrase stays two words
Breaks the pattern
CIA collides with the agency name, so the second word does the disambiguation
Breaks the pattern
triad is capitalized in this term though the ordinary noun is lowercase

Spelled like

  • AAA
  • triangle
  • dyad
Broken into chunks
  • CIA
    • AAA
    • DAD
  • tri
    • triangle
    • tricycle
    • triple
  • ad
    • dyad
    • monad
    • olympiad
What it sits beside

Same subject

Same shape

  • DAD triad
  • Parkerian Hexad
  • nuclear triad

Security property models

  • DAD triad
  • Parkerian Hexad

Three-letter security labels

  • AAA
  • DAD

GRC foundations

Where it sits in the deck

Phase 8: Governance, Risk, and Compliance Frameworks

Individual controls need a governance envelope — introduce the risk and compliance structures, standards bodies, and regulations that frame AI accountability at scale.

Neighbours in this phase