This is not to say that there is no disagreement over definitions in the technical community. Rather, the range of such disagreement is much narrower than in the legal community. An AIS is any assembly of electronic equipment, hardware, software, and firmware configured to collect, create, communicate, disseminate, process, store, and control data or information. Every AIS is used by subjects to act upon objects. A subject is any active entity that causes information to flow among passive entities called objects.
Confidentiality is roughly equivalent to privacy.
Integrity measures are meant to protect data from unauthorized modification. The integrity of an object can be assessed by comparing its current state to its original or intended state. This is because the integrity problem has until recently been addressed by restricting access to AIS to trustworthy subjects. Today, the integrity threat is no longer tractable exclusively through access control. Work in integrity has been accelerating over the past few years, and will likely become as important a priority as confidentiality in the future.