Minimum scope of disclosure

A security technique in which two or more entities separately hold data items that individually convey no knowledge of the information that results from combining the items. A condition under which two or more entities separately have key components that individually convey no knowledge of the plaintext key that will be produced when the key components are combined in the cryptographic module. Separation of data or information into two or more parts, each part constantly kept under control of separate authorized individuals or teams so that no one individual or team will know the whole data. The specific application of the ideas of separation of duties and two-man control into a single solution. The basic idea is that the information or privilege required to perform an operation is divided among multiple users. This ensures that no single person has sufficient privileges to compromise the security of the environment.
[view]

A privacy principle that requires reasonable disclosure to a consumer of an entity’s personally identifiable information (PII) collection and use practices. This disclosure information is typically conveyed in a privacy notice or privacy policy. Microsoft: http://www. microsoft. com/security/glossary/.
[view]

(1) The prevention of unauthorized access and manipulation of data. (2) The right of individuals to control or influence what information related to them may be collected and stored and by whom and to whom that information may be disclosed. An element of confidentiality aimed at preventing personal or sensitive information about an individual or organization from being disclosed.
[view]

The method used to provide support to an intelligence source or operation, and that, if disclosed, is vulnerable to counteraction that could nullify or significantly reduce its effectiveness in supporting the foreign intelligence or foreign counterintelligence activities of the United States, or that would, if disclosed, reasonably lead to the disclosure of an intelligence source or operation.
[view]

Confinement technique in which each process is given only the minimum privileges it needs to function; also referred to as sandboxing. (. See also needtoknow. )Principle requiring that each subject be granted the most restrictive set of privileges needed for the performance of authorized tasks. Application of this principle limits the damage that can result from accident, error, or unauthorized use of an information system.
[view]