Which of the following security related areas are used to protect the confidentiality, integrity, and availability of federal information systems and information processed by those systems?

Personnel security involves screening, training, and managing personnel to ensure they do not pose a risk to information systems, directly supporting CIA.

Access control mechanisms restrict who can access what resources and under what conditions, directly protecting confidentiality and integrity.

Configuration management ensures systems are configured securely and consistently, preventing vulnerabilities that could compromise CIA.

Media protection safeguards physical and electronic media from unauthorized access, modification, or destruction, thereby preserving CIA.

Risk assessment identifies, analyzes, and evaluates risks to information systems, forming the foundation for implementing controls that protect CIA.