Confidentiality
What is Confidentiality?
The principle of ensuring that information is accessible only to authorised individuals, entities, or processes. One of the three pillars of information security (CIA triad).
Related terms
Frameworks that govern confidentiality
What the standards actually require on confidentiality
Requirements naming confidentiality across 6 standards, quoted from the control text.
Management obtains signed confidentiality agreements from employees and contractors before granting access to IT systems, putting them on notice that the institution owns its information, expects strict confidentiality and prohibits sharing beyond legitimate b...
ffiec-it-examination-handbook::IS-II.C.7(d) · II.C.7(d) Confidentiality Agreements (Information Security) →Confidentiality or non-disclosure agreements that match the organization's information protection needs are to be identified, written, reviewed regularly and signed by staff and by the outside parties concerned.
iso-27002-2022::6.6 · Confidentiality or non-disclosure agreements →Confidentiality means keeping information secure and private. Auditors should be discreet in how they use and protect information that comes to them while auditing.
iso-19011-2026::4.5 · Confidentiality →The organization should have processes that keep matters confidential for every interested party, the whistleblower and anyone reported included.
iso-37002-2021-whistleblowing-management-systems::7.5.5 · 7.5.5 Confidentiality →Protect the [Selection (one or more): confidentiality; integrity] of transmitted information.
NIST800-SC-8 · SC-8 Transmission Confidentiality and Integrity →The processor must avoid anything that would disclose personal data or processing results except where the law authorises it, and must protect and secure the processing, the electronic media and devices used, and the personal data on them.
federal-decree-law-no-45-of-2021-on-the-protection-of-personal-data-uae-pdpl::8(5) · Articles 8(5) and 8(6): processor confidentiality and security of processing and media →Questions people ask about confidentiality
What is Confidentiality?
Why is Confidentiality important for compliance?
What concepts are related to Confidentiality?
Which compliance frameworks address Confidentiality?
Where can I learn more about Confidentiality?
See how Confidentiality applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.