Need-to-know
Need-to-know: A determination within the executive branch in accordance with directives issued pursuant to this order that a prospective recipient requires…
Definition
A determination within the executive branch in accordance with directives issued pursuant to this order that a prospective recipient requires access to specific classified information in order to perform or assist in a lawful and authorized governmental function.
Alternative Definitions
- Definition 2
A method of isolating information resources based on a user’s need to have access to that resource in order to perform their job but no more. The terms ‘need-to know” and “least privilege” express the same idea. Need-to-know is generally applied to people, while least privilege is generally applied to processes. (CNSSI-4009) (NISTIR)