The Three principles of ISO-27001

ISO-27001 evaluates the implementation of policies and controls such as Risk Assessment, Risk Treatment, and Continual Improvement. All of them built on the foundation of the CIA triad:

• Confidentiality

  This principle ensures that sensitive information is only accessible to those with the proper authorization. 

  How does your business protect confidential information?: business intellectual property, financial reports, any confidential info. Use access control, encryption, information protection, and policies.

• Integrity

  Determines whether data remains accurate and unchanged, preventing unauthorized modifications.

  Example: Transaction processing is accurate to avoid fraud. to avoid fraud. Use process monitoring, quality control, etc.

• Availability

  Determines whether your employees and clients can rely on your systems. Data and information need to be readily accessible to authorized users whenever they are needed, ensuring business continuity.

  Examples: Data encryption, access controls, audit trails, incident response and Data Validation and Quality Checks.