A property that information is not disclosed to users, processes, or devices unless they have been authorized to access the information.

Extended Definition: Preserving authorized restrictions on information access and disclosure, including means for protecting personal privacy and proprietary information.

Related Term(s): Availability, integrity

Adapted from: CNSSI 4009, NIST SP 800-53 Rev 4, 44 U.S.C., Sec 3542