Concept 15
Need to Know
Limiting information access to what a user needs for specific tasks.
Need to know means users should only access information required for their specific tasks.
Even if someone has clearance, they should only access necessary information.