As the IT security manager for ThorTeaches.com, part of your duty is to ensure that the company's information assets are protected according to the CIA triad (Confidentiality, Integrity, and Availability). Recently, there have been several instances of unauthorized access to sensitive company data, and the board of directors is concerned about the potential for data breaches. What measures should you implement to ensure that the company's information assets are protected according to the CIA triad?