None of them are less important. All three need to be present in order for a system to be secure. Especially when it comes to attacking infrastructure, removin

None of them are less important. All three need to be present in order for a system to be secure. Especially when it comes to attacking infrastructure, removing the availability of operations on this infrastructure is a good attack vector. This can be done by, for example, creating a temporary ban on logging in. It can be done by reporting a hacking attempt from the legitimate IP address range.