Need to know
The need-to- know basis (knowledge only when needed ) describes a security objective for secret information. Even if a person always has access to data or information contained in this security level, the need-to- know basis denies access if the information is not immediately required for the performance of a specific task of this person. The principle is, among others, one of the basic concepts for the internal workings of the intelligence agencies.
In information technology, the need-to- know principle found in the Discretionary Access Control model application. The mandatory access control model, however, used for access control in addition general group shares.