..... is the capacity to assure that only authorised subjects access the information
Cost
Availability
Integrity
Confidentiality