public:99_annexes:annex-b-terms-and-definitions:c:confidentiality

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
public:99_annexes:annex-b-terms-and-definitions:c:confidentiality [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1public:99_annexes:annex-b-terms-and-definitions:c:confidentiality [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 +====== Confidentiality ======
  
 +[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
 +
 +===== Discussion =====
 +
 +Confidentiality protects [[public:99_annexes:annex-b-terms-and-definitions:i:information|Information]] against unauthorised availability or disclosure.
 +
 +Confidentiality controls restrict access according to the information’s classification, applicable [[public:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]], authorised purpose, and the identity or role of the requesting person, organisation, process, or [[public:99_annexes:annex-b-terms-and-definitions:n:node|Node]].
 +
 +Controls supporting Confidentiality include encryption, [[public:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]], [[public:99_annexes:annex-b-terms-and-definitions:a:access_control|Access Control]], information minimisation, redaction, segregation, and protected storage and communication.
 +
 +Confidentiality remains distinct from [[public:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]]. Confidentiality concerns unauthorised availability or disclosure. Integrity concerns accuracy, completeness, and protection from unauthorised alteration.
 +
 +===== Definition =====
 +
 +//property of information that restricts its availability and disclosure to authorised individuals, entities, and processes//
 +
 +===== Source =====
 +
 +Adapted from ISO/IEC 27000, Information security, cybersecurity and privacy protection — Vocabulary.
 +
 +===== Note =====
 +
 +Confidentiality applies throughout the information lifecycle, including creation, processing, transmission, storage, use, archival, and disposal.
 +
 +Confidentiality does not require secrecy for all information. The applicable controls reflect the information’s classification, purpose, applicable policy, and consequences of unauthorised disclosure.
 +
 +A protected record uses a reference, identifier, digest, token, or redacted representation when reproducing the original value would violate its confidentiality controls.
 +
 +===== Example =====
 +
 +Encryption and Access Control preserve the Confidentiality of a private cryptographic key by limiting its disclosure to authorised processes.
 +
 +----
 +
 +<WRAP centeralign>
 +© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
 +</WRAP>