Confidentiality is the security objective that ensures that information is only accessible to authorized persons or systems. It protects sensitive data from unauthorized access and misuse by ensuring that only authorized users can access confidential information. This is achieved through measures such as access controls, encryption and secure authentication mechanisms.
ISO 27001 and BSI Grundschutz emphasize confidentiality as a central element of information security. Both standards recommend the implementation of access controls and encryption techniques to ensure that sensitive data is protected from unauthorized access. This also includes the classification of data and the regular review of access rights.