home/dictionary/need to know

need to know

nounverified· unreviewed·updated Aug 30, 2026

An administrative action officially declaring a particular individual requires access to specified sensitive or classified information in order to perform their assigned duties.

Framework senses

NERC CIP-003-6 (Security Management Controls) v61 senseview framework →
§1
An administrative action officially declaring a particular individual requires access to specified sensitive or classified information in order to perform their assigned duties.
NISTIR 7298: Glossary of Key Information Security Terms, Revision 21 senseview framework →
§1
A method of isolating information resources based on a user’s need to have access to that resource in order to perform their job but no more. The terms ‘need-to know” and “least privilege” express the same idea. Need-to-know is generally applied to people, while least privilege is generally applied to processes.
CNSSI-4009 (Glossary of Information Assurance Terms)1 senseview framework →
§1
A method of isolating information resources based on a user’s need to have access to that resource in order to perform their job but no more. The terms ‘need-to know” and “least privilege” express the same idea. Need-to-know is generally applied to people, while least privilege is generally applied to processes.
NIST SP 800-171r31 senseview framework →
§1 · attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
Increment 2: attested in 800-171r3 without a glossary definition.
Legacy lexicon import1 senseview framework →
§1 · legacy_primary
An administrative action officially declaring a particular individual requires access to specified sensitive or classified information in order to perform their assigned duties.
DR-088 backfill from the noun definition column