--- title: Multi-dimensional Cloud Security Governance description: Learn how use the CIA Triad Security Model to support multi-dimensional cloud governance. image: https://blogs.incyclesoftware.com/hubfs/ciatriad-featured.jpg --- # CIA Triad Security Model for Multi-dimensional Cloud Governance Posted by Michael Spenny - January 12, 2021 ### The good news is you don’t have to reinvent the wheel to build out a comprehensive governance model for your organization. - [**](https://www.facebook.com/sharer/sharer.php?u=https://blogs.incyclesoftware.com/enterprise-azure-governance/cia-triad-security-model-for-multi-dimensional-cloud-governance) - [**](https://www.linkedin.com/shareArticle?mini=true&url=https://blogs.incyclesoftware.com/enterprise-azure-governance/cia-triad-security-model-for-multi-dimensional-cloud-governance&title=&summary=&source=) - [**](https://twitter.com/home?status=) - [**](mailto:?&subject=https://blogs.incyclesoftware.com/enterprise-azure-governance/cia-triad-security-model-for-multi-dimensional-cloud-governance&body=https://blogs.incyclesoftware.com/enterprise-azure-governance/cia-triad-security-model-for-multi-dimensional-cloud-governance) ** ![header-picture](https://blogs.incyclesoftware.com/hubfs/multidimensional-header-web.jpg "header-picture") ### **The CIA Triad Security Model** With the increasing sophistication of cyber threats facing organizations and businesses critical infrastructure and sensitive data, it’s now more important than ever to adopt a comprehensive cloud security governance model. To put this in a monetary context, it’s estimated that the average cost of a data breach for a company in the United States is $7.91 million1; money spent to cover the costs of forensic analysis, remediation and litigation. Proactively addressing gaps in your overall security posture can save an organization a lot of unnecessary pain and expense. ![Enterprise Governance Information Security](https://blogs.incyclesoftware.com/hs-fs/hubfs/ciatriad.png?width=434&name=ciatriad.png) The good news is you don’t have to reinvent the wheel to build out a comprehensive governance model for your organization. The CIA Triad is a well-known and venerable model that can help you think through all of the facets of building a strong security posture. The model consists of these three core concepts ### **Confidentiality** Confidentiality is concerned with preventing unauthorized access to sensitive information. The access could be intentional, such as a bad actor breaking into the network and stealing the information, or it could be unintentional, as the result of carelessness or lack of knowledge on the part of individuals handling the information. When planning a strategy to mitigate these risks, be sure to include cryptography and access control. Some Azure services and feature that will help you maintain the confidentiality of your critical information include: - Certificates for all websites and api endpoints - TDE performs real-time I/O encryption and decryption of the data at the page level.  - Transport Layer Security (TLS) is also used for all communication in addition to the base transport level checksums provided by TCP/IP.  [![Azure Governance Playbook FREE DOWNLOAD](https://no-cache.hubspot.com/cta/default/707613/12e14509-7f97-4632-9ac5-296ad0dc3b81.png)](https://cta-redirect.hubspot.com/cta/redirect/707613/12e14509-7f97-4632-9ac5-296ad0dc3b81) ### **Integrity ** The integrity component of the CIA Triad is concerned with protecting data from modification or deletion by unauthorized users. When performing analysis to identify who should have access to what, be sure to also note whether your data should be immutable or not. There are some types of data that should never change (such as audit logs and event logs). - Data Integrity Alert Monitoring  - Azure Information Protection for Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics - Log immutability and traceability - RBAC ### **Availability** The last component in the CIA Triad refers to Availability. Reliable access to access and authentication mechanisms (think AAD) must all be working properly for the information they provide and protect to be available when needed. There are architectural patterns and practices that can be employed to guarantee availability which are all supported by Azure including: - Setting up high availability clusters - Azure Front Door and Traffic Manager for intelligent routing and rerouting during network outages - To protect against Distributed Denial of Service attacks and other common exploits, leverage Azure Application Gateway, Azure Firewall and Web Application Firewall. - Also take time to configure Service Level Agreements that make sense for your business or organization’s use cases. Rapid disaster recovery is something every organization should carefully plan out. While this model helps teams think about security, its not intended to be an all-encompassing framework. InCycle Software has worked with many clients to help them plan out their security governance policies. and accelerate their security governance adoption. To learn more about enterprise and cloud governance, [download the Governance Playbook](https://www.incyclesoftware.com/playbook-for-modern-enterprise-and-cloud-governance) today! Topics: [Security](https://blogs.incyclesoftware.com/enterprise-azure-governance/topic/security) [![Modern Enterprise & Cloud Governance Playbook](https://no-cache.hubspot.com/cta/default/707613/e1a05ffb-2e33-417f-8064-4014f1877e61.png)](https://cta-redirect.hubspot.com/cta/redirect/707613/e1a05ffb-2e33-417f-8064-4014f1877e61) --- ### Recent Posts By Michael Spenny - 12 January, 2021 #### Collaborative Cloud Governance: Auditability & Visibility [![read more](https://cdn2.hubspot.net/hubfs/685080/IMG-TurboSodium/Sodium%20v2/blog/arrow-recent-blog-post.png "read more")](https://blogs.incyclesoftware.com/enterprise-azure-governance/collaborative-cloud-governance-auditability-and-visibility) By Michael Spenny - 12 January, 2021 #### How Does the Cloud & Azure Transform Traditional Governance? [![read more](https://cdn2.hubspot.net/hubfs/685080/IMG-TurboSodium/Sodium%20v2/blog/arrow-recent-blog-post.png "read more")](https://blogs.incyclesoftware.com/enterprise-azure-governance/how-does-the-cloud-azure-transform-traditional-governance) By Michael Spenny - 12 January, 2021 #### DevOps Enables Modern Governance [![read more](https://cdn2.hubspot.net/hubfs/685080/IMG-TurboSodium/Sodium%20v2/blog/arrow-recent-blog-post.png "read more")](https://blogs.incyclesoftware.com/enterprise-azure-governance/devops-enables-modern-governance) --- ### Sign-up for Governance Blog Updates # ![Partners Awards List - 2021](https://blogs.incyclesoftware.com/hs-fs/hubfs/PoY%20Award%202021/Partners%20Awards%20List%20-%202021.png?width=748&name=Partners%20Awards%20List%20-%202021.png) # All About Modern Governance InCycle's Modern Governance blog is the result of almost 20 years of industry experience and is ideal reading for medium and large organizations that are trying to navigate cloud adoption and are struggling to design and implement modern governance for either a team, business unit or across the enterprise. The blog is comprehensive and addresses various stakeholders, including operations, security, application development, accounting, and audit. The goal of the blog is to showcase modern governance drivers, new challenges that arise, and to provide actionable guidance for practitioners to complete a modern governance transformation. ### Azure Governance Playbook FREE guidance and tools to complete governance transformation. [![Learn More!](https://no-cache.hubspot.com/cta/default/707613/d0b6969d-3645-4839-ae95-84acb7ca61a2.png)](https://cta-redirect.hubspot.com/cta/redirect/707613/d0b6969d-3645-4839-ae95-84acb7ca61a2) ### Posts by Topic - [Cost Control (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/cost-control) - [Security (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/security) - [Structure & Responsibilities (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/structure-responsibilities) - [Visibility (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/visibility) - [Implementation & Adoption (4)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/implementation-adoption) ### Most Popular Posts ### Blog Archive - [January 2021 (23)](https://blogs.incyclesoftware.com/enterprise-azure-governance/archive/2021/01) - [February 2021 (1)](https://blogs.incyclesoftware.com/enterprise-azure-governance/archive/2021/02) - [**](https://twitter.com/incyclesoftware?lang=en) - [**](https://ca.linkedin.com/company/incycle-software) - [**](https://www.facebook.com/InCycleSoftware/) ### About us At InCycle, we believe there is always a better way and today, that includes the cloud. [![InCycle Microsoft Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/Incycle%202017%20website%20resources/logo-InCycle-New-white.png?width=200&name=logo-InCycle-New-white.png "InCycle Microsoft Partner")](https://www.incyclesoftware.com/) ### Learn more - [Why Incycle?](https://www.incyclesoftware.com/why-incycle) - [Success Stories](https://www.incyclesoftware.com/customer-success-stories) - [Events](https://www.incyclesoftware.com/events) - [Careers](https://www.incyclesoftware.com/careers) - [About](https://www.incyclesoftware.com/about-incycle-software)   ### 1-800-565-0510 [info@incyclesoftware.com](mailto:info@incyclesoftware.com)  ### ![Microsoft GitHub Verified Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/GitHub%20Verified%20Partner%20-%20white-SQUARE.png?width=256&height=57&name=GitHub%20Verified%20Partner%20-%20white-SQUARE.png) ![Data & AI Solutions Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/Data%20%26%20AI%20Solutions%20Partner.png?width=125&height=144&name=Data%20%26%20AI%20Solutions%20Partner.png) ![Digital & App Innovation Solutions Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/Digital%20%26%20App%20Innovation%20Solutions%20Partner.png?width=125&height=144&name=Digital%20%26%20App%20Innovation%20Solutions%20Partner.png)   © 2025 InCycle Software [Privacy policy](https://www.incyclesoftware.com/privacy) ** ![](https://px.ads.linkedin.com/collect/?pid=302756&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=302756&fmt=gif)