Determining what are good sources for security information is difficult and filtering out the false warnings will take time and require investigation. These concepts are further discussed throughout this paper. Confidentiality Confidentiality is the concept that information is unavailable to those who are unauthorized to access it. Strict controls must be implemented to ensure that only those persons who need access to certain information have that access. In some situations, such as those with confidential and secret information, people should only have access to that data which is necessary to perform their job function.
Many computer crimes involve compromising confidentiality and stealing information.
The concept of allowing access to information or resources only to those who need it is called access control. Protecting these passwords is one of the most fundamental principles of IT security. Imagine your business as a typical suburban house. A system password can be likened to a front door key. No one can enter the house without the key, but it can easily be lost, misplaced, or stolen.