Which of the following is used in the practice of Information Assurance (IA) to define assurance requirements?

The classic information security model - the CIA triad - provides the core framework that Information Assurance practitioners use to define assurance requirements for protecting information systems. Each pillar (Confidentiality, Integrity, Availability) maps to specific security controls and assurance criteria that must be addressed in IA evaluations. This model is the foundational reference point for developing security policies, conducting risk assessments, and establishing security requirements in IA practice.

The Communications Management Plan is a project management artifact describing communication strategies among stakeholders and has no role in defining Information Assurance assurance requirements.

The Five Pillars model (Availability, Integrity, Authentication, Confidentiality, Nonrepudiation) is an extended IA framework but is not the primary model cited for defining assurance requirements in standard IA practice.

The Parkerian Hexad adds possession, authenticity, and utility to the CIA triad but is not the standard model used to formally define IA assurance requirements in recognized frameworks.