Six Fundamental Components of Information Security

Parkerian Hexad

Six fundamental, atomic, non-overlapping attributes of information that are protected by information security measures. Defined by Donn B. Parker, renowned security consultant and writer, they are confidentiality, possession, integrity, authenticity, availability and utility.

confidentiality

Restrictions on the accessibility and dissemination of information.

possession

The ownership or control of information, as distinct from confidentiality. For example, if confidential information such as a user ID-password combination is in a sealed container and the container is stolen, the owner justifiably feels that there has been a breach of security even if the container remains closed (this is a breach of possession or control over the information).

data integrity

The quality of correctness, completeness, wholeness, soundness and compliance with the intention of the creators of the data. It is achieved by preventing accidental or deliberate but unauthorized insertion, modification or destruction of data in a database.

authenticity

The correct attribution of origin such as the authorship of an e-mail message or the correct description of information such as a data field that is properly named.

availability

The accessibility of a system resource in a timely manner; for example, the measurement of a system's uptime.

utility

Usefulness; fitness for a particular use. For example, if data are encrypted and the decryption key is unavailable, the breach of security is in the lack of utility of the data (they are still confidential, possessed, integral, authentic and available).

Ref: www.answers.com