SECURE&TIP: CONFIDENTIALITY, INTEGRITY AND AVAILABILITY

This entry is also available in:

 

 

In Information Security there are three fundamental principles that are considered the ABC of Cybersecurity and that we must always learn and apply in our day-to-day work. They are easy to remember:

1. CONFIDENTIALITY: Both in the work environment, as well as in the personal environment, this principle implies that if we are dealing with corporate information or personal data, that only we are authorized to treat, that we do not share them to third parties, without being sure that this action is permitted and 100% secure.

2. INTEGRITY: We mention this principle when we want a certain information to be kept in its original version and that it can only be modified, copied or deleted by authorized persons, so that there is no manipulation or introduction of erroneous or even false data. That is why in some cases this principle is linked to another secondary principle which is AUTHENTICITY, coming from the word authentic, that is to say, unaltered or original.

3. AVAILABILITY: It forces to always have under control in which places and formats the information is available (on paper in a file cabinet, on paper in a closet of department X, digitally in a cloud, digitally on an external USB memory, etc.). In this way, we avoid the existence of copies of data or documents, beyond those authorized by the company or entity. This principle is also linked to another secondary principle which is TRACEABILITY, which refers to the traceability of information. Whenever we create, edit, copy, delete or destroy a document, it leaves a trace, such as the date and time when the action was performed, which authorized or unauthorized person did it and in which physical or digital place we have saved it.

 

IMPORTANT NOTE: We remind again that, if you have any doubt about how to correctly use a document, information or technology it is important that you discuss it with your line manager, the CISO Security Officer and the IT department, before making a mistake that could cause an Information Security or Data Protection problem.

 

*Shipment date: July 28, 2025