..... is the capacity to assure that only authorised subjects access the information
Cost
Integrity
Availability
Confidentiality