Jim West Presents Nine-Point Security Framework in Aurora

The cybersecurity veteran introduced an expanded risk model during a session at the ISC2 Security Congress.

Updated on Oct. 26, 2026 in Cybersecurity

Bold flat-color editorial illustration featuring a nine-sided geometric structure, representing a modern approach to cybersecurity risk modeling. — Cybersecurity expert Jim West introduced the Nine-Point Core Security Principles Star, a new framework for mapping organizational risk, at the ISC2 Security Congress. AI Illustration. Upload story photo >

Live Poll

Do you trust that current security standards are sufficient to protect data in the digital age?

Cybersecurity expert Jim West introduced the Nine-Point Core Security Principles Star during a presentation at the ISC2 Security Congress in Aurora. The framework aims to modernize how organizations assess risk beyond the traditional three-part security model.

Why it matters

West argues that the traditional CIA Triad is no longer sufficient to address the complexities of modern cyber threats. His expanded model provides a way to map security weaknesses to business impact and determine risk acceptability.

The Nine-Point Core Security Principles Star incorporates confidentiality, integrity, availability, non-repudiation, authenticity, authorized use, possession, privacy, and utility. Participants in the session were awarded 1 CPE credit.

The players

Jim West

He is an IT and cybersecurity professional with more than 35 years of experience in the field.

ISC2

This is an international non-profit organization focused on training and certifying information security professionals.

The details

The model visualizes risk by framing it as a continuous negotiation between leadership priorities, mission requirements, and operational realities. It serves as a tool for security professionals to align audit findings and control effectiveness with overall business impact.

Jim West has been delivering his presentation since 2016.
The ISC2 Security Congress took place from October 24-28, 2026.
West presented the session on October 26, 2026, from 10:10 AM to 11:10 AM MT.

The Tech Race

The introduction of the Nine-Point Core Security Principles Star challenges the dominance of the traditional CIA Triad in professional training. This shift reflects a broader industry movement to replace legacy security frameworks with models that account for modern operational complexity.

Security professionals can utilize this nine-point framework to better articulate risk to non-technical leadership. Its adoption may lead to more nuanced policy creation within organizations, directly influencing how security controls are implemented and maintained.

The takeaway

Security leaders should evaluate whether their current risk models account for modern factors like utility and non-repudiation. Moving beyond simple triads allows for a more holistic approach to managing business risk in an increasingly complex digital landscape.