Imagine you are working for a company that has over $12,000$ employees. You need to develop a mitigating control to defend your desire to put a specific control in place for management.

Taking the confidentiality, integrity, availability triad into consideration.

How can the company effectively align confidentiality in its security controls protect its assets and data?

How does putting in this control affect the other legs of the triad?