The IT Law Wiki
Advertisement

Definition

Need-to-know is

  • the necessity for access to, knowledge of, or possession of specific information required to carry out official duties.[1]
[a] determination which is made by an authorized holder of classified or proprietary information as to whether or not a prospective recipient requires access to specific the information in order to perform or assist in a lawful and authorized governmental function.[2]

Security

Need-to-know means that as a result of jurisdictional, organizational, or operational necessities, intelligence or information is disseminated to further an investigation.

References

  1. Turquiose Book: A Guide to Understanding Information System Security Officer Responsibilities for Automated Information Systems (NCSC-TG-004-88 Oct. 16, 2002) (full-text).
  2. OPSEC Glossary of Terms (full-text).
Advertisement