..... is the capacity to assure that only authorised subjects access the information
Cost
Confidentiality
Integrity
Availability