Learning path / 1 lesson

Privacy is not a CIA checkbox

One foundations-adjacent lesson on the boundary between security objectives (confidentiality, integrity, availability, and resilience) and privacy objectives (appropriate use, minimization, and individual rights). Encryption and access control are not privacy done. Sector laws stay in separate explainers.

Work through the lessons in sequence, or choose the question you want to answer today.

01

Privacy is not a CIA checkbox

Separate security objectives (confidentiality, integrity, availability, and resilience) from privacy objectives (appropriate use, minimization, and individual rights) without treating encryption or a framework map as a legal determination.

10 MIN

Turn knowledge into a decision.

Once you have the ideas, try a short scenario. You’ll see why the tempting answer isn’t always the most useful one.

Open the practice range ↗

Find your next idea.

Tip: press / to open search. Escape closes this window.