Thing one:

• Confidentiality:

  • Computer related assets are only available to authorized parties. Only those that should have access to something will actually get that access.
    • “Access” isn't limited to reading. But also to viewing, printing or...
    • Simply even knowing that the particular asset exists (steganography)
  • Straight forward concept but very hard to implement.