Confidentiality

Goals · Beginner

The goal of keeping information from being disclosed to people or systems that are not allowed to have it.

It is about who can learn the information. Encryption, access permissions, and careful handling of screens and printouts all support this goal.

Example: A medical record should be readable by the care team and not by every account on the network. That is confidentiality.

Common misconception

Hiding data is not the same as proving it is unchanged or that the system is online.