Introductory Security Fundamentals
Tanya Janca · 2025
This chapter focuses on fundamental security concepts, the sorts of things that every security person wishes every other IT professional knew. If we are trying to create a secure system, it is of the utmost importance that we never assume trust. The CIA triad are the three things that make up the mandate for most IT Security teams around the world. It is a cybersecurity team's job to guard the confidentiality, integrity, and availability of the systems and data they are charged with protecting. Zero Trust is a concept that is the opposite of assumed trust. When we implement Zero Trust, this means we have to be careful to ensure that everything is set up properly or things break. Every part of our application that someone can interact with is part of our app that can be attacked. Anything that can be attacked is considered part of our attack surface.