Parkerian Hexad
The Parkerian Hexad is a set of six fundamental principles that extend the classic CIA triad for describing information security.
- Proposed by Donn Parker, introduced in his book Fighting Computer Crime
- Aim to provide a more comprehensive framework for understanding and addressing the complexities of information security
6 Principles
- Confidentiality
- Integrity
- Availability
- Possession
- Authenticity
- Utility
Confidentiality, Integrity, and Availability
Contains the same 3 aspects from CIA Triad
- differs on the integrity principle
- CIA integrity principle focuses on the authorized modification of data
- Parkerian Hexad model includes incorrect modification by authorized people
- data must be whole and completely unchanged
Possession (or control)
Possession refers to the ownership of information by authorized entities.
- Includes physical media on which the data is stored
- Enables discussion of the loss of data in its physical medium without involving other factors such as availability
Authenticity
Authenticity ensures the information is genuine and the source is correct.
Similarly, nonrepudiation refers to the concept that prevents people from taking an action, such as sending an email and then later denying that they have done so.
Utility
Utility ensures the information is useful and serves its intended purpose.
- only Parkerian Hexad principle that is not binary in nature
Difference Between Parkerian Hexad and CIA Triad
The Parkerian Hexad provides a broader perspective on information security issues and challenges, offering an extended view that includes elements such as ownership and usefulness of data, which are often not covered by the simpler CIA triad.