Glossary: Policies, Standards and Risk Management

need to know

Also written: need-to-know

The principle that, even with the right access level, a person sees specific data only if their work needs it. The risk register itself is shared on this basis.