Information security follows three overarching principles: Confidentiality: This means that information is only being seen or used by people who are authorized to access it. Integrity: This means that any changes to the information by an unauthorized user are impossible (or at least detected), and changes by authorized users are tracked.