Building Trust through Cybersecurity: The CIA Lens

A few weeks ago, we shared IT’s commitment to building secure, scalable service delivery on which the college can rely. The point then is the point now: this work isn’t theoretical — it shows up in the daily experience of teaching, learning and running the college.

A simple way to frame the cybersecurity side of that work is through three principles we use as a guide in IT. You’ll hear these referred to as the CIA Triad:

  • Confidentiality
  • Integrity
  • Availability

If those sound technical, here’s the plain meaning: protect the right information, keep it accurate and make sure systems are there when people need them.

1) Confidentiality: Access That Matches Responsibility

Confidentiality is about making sure the right people have the right access — and just as importantly, that the wrong people don’t.

On a college campus, this is not a “security thing.” It’s a trust thing. It’s student records, employee information, financial data and internal decision-making.

What this looks like in practice:

  • Access requests follow a consistent process.
  • Roles have clear access standards (instead of one-off exceptions).
  • Accounts are reviewed and updated as people change roles — not months later.

This is why we’re focused on standardized access and account lifecycle management. It’s not about slowing work down — it’s about reducing risk and removing confusion.

2) Integrity: Confidence That the Data Is Right

Integrity is about knowing the information we rely on is accurate — and that changes are intentional, traceable and recoverable.

Integrity shows up when:

  • Reports match reality.
  • Records don’t drift over time.
  • Errors are caught early instead of discovered after decisions are made.

This connects directly to the shift we’ve been making inside IT: defined ownership, documented processes and fewer ad-hoc fixes. When work is handled consistently, the college gets better outcomes — not just faster outcomes.

3) Availability: Systems That Are Ready When the College Is

Availability means systems and services are dependable when people need them — during instruction, advising, registration, payroll and day-to-day operations.

Availability is not just “uptime.” It’s also:

  • Clear ownership of services.
  • Known escalation paths.
  • Predictable response patterns.
  • Fewer surprises.

This is exactly why we’re strengthening intake, monitoring and service standards. The goal is steady operations — not heroics.

What CIA Has To Do With Your Experience

Here’s the practical connection: Confidentiality, integrity and availability are not separate from service delivery — they are part of what makes service delivery reliable.

When we improve these three areas, campus experiences:

  • Fewer last-minute emergencies.
  • Clearer expectations.
  • Faster resolution when issues happen.
  • Better protection of the information we all rely on.

Keeping Momentum Forward

Over the coming months, we will continue strengthening the foundations that support this shift, including:

  • Standardized access and account lifecycle management.
  • Clear service ownership and escalation paths.
  • Documented processes that reduce guesswork.
  • Ongoing collaboration with departments and students.

Progress isn’t measured only by what IT delivers. It’s measured by how smoothly the college can operate — with fewer disruptions and more confidence.

Our direction remains the same: build an IT environment that is secure, scalable and dependable — so the college can move forward with confidence.

For more information, please contact RCC Chief Information & Security Officer Richard Kent Plott via email or Teams.