Security without obscurity : a guide to confidentiality authentication and integrity The traditional view of information security includes three cornerstones: confidentiality integrity and availability also known as the CIA of information security. As the field has become more complex both novices and professionals with years of experience need a good reference book outlining the basics. Rather than focusing on compliance or policies and procedures this book takes a top down approach. Providing insight from the authors experience developing dozens of standards the book starts with the fundamentals to bridge the understanding gaps approaching information security from the bedrock principles of CIA.