What are the Three C's of cybersecurity?

What are the Three C's of cybersecurity is a concept taught in many Australian cyber awareness courses, though there are several variations, the most common Three C's are Confidentiality, Integrity and Availability, also known as the CIA Triad, but another popular framework for user behaviour is the Three C's as Conceive, Communicate and Maintain, and for business it is sometimes Comprehend, Continue and Communicate. However, the most widely accepted Three C's in cyber security education are Confidentiality, Integrity and Availability as core principles. Confidentiality means protecting sensitive data from unauthorised access, using encryption, access controls and multi-factor authentication, for example ensuring customer data and medical records are only seen by authorised staff. Integrity means ensuring data is accurate and not tampered with, using hashing, checksums and version control, so that if an attacker modifies invoices or medical records, it is detected. Availability means ensuring systems and data are available when needed, protecting against denial of service attacks, ransomware and hardware failure via backups, redundancy and incident response. Another variation for small business taught by ACSC is the Three C's of cyber safety, which are Culture, Controls and Continuity, meaning build a cyber-aware culture with training, implement controls like MFA and backups, and plan for business continuity after incident. Some trainers also teach Cyber hygiene Three C's as Complexity of passwords, Caution with emails, and Currency of updates. All versions emphasise protecting data and people.