Security = Confidentiality + Integrity + Availability
Peter Fagan · 2024
The current reductionist approach to cyber is dissected, showing that the standard model of Confidentiality, Integrity, and Availability (CIA) is demonstrably incomplete. Alternatives such as the Parkerian Hexad are reviewed, as is wider research on the likelihood that the CIA model might be abandoned. The point regarding systems thinking is expanded, to argue that security should be viewed as part of a complex system. This chapter introduces the idea of security as a social construct, using case studies to argue that security should be seen as an ongoing negotiation rather than a static state. The case studies examined here will be revisited in later sections.