when looking at the cia triad in a networked setting what are some of the first things we should be setting up to ensure it s appropriate process