Confidentiality (DoD Definition): Protecting Sensitive Information

Department of Defense Definition

Confidentiality – Assurance that information is not made available or disclosed to unauthorized persons, entities, or processes.

Context

One of the three pillars of the CIA triad (Confidentiality, Integrity, Availability) underpinning DoD information assurance (DoDI 8500.01, CNSSI-4009).

Implementation Controls

• Access controls (MAC, DAC, RBAC, ABAC).
• Encryption (data at rest/in transit: AES-256, TLS 1.2+).
• Classification marking (TOP SECRET, SECRET, CONFIDENTIAL, CUI).
• Need-to-know principle; compartmentalization (SCI, SAP).
• Audit logging, intrusion detection, DLP.
• Personnel security (clearances, NDAs, insider threat programs).

Contrast

• Integrity: Prevent unauthorized modification.
• Availability: Ensure timely, reliable access.