Confidentiality refers back to the assurance that information is available only to authorised men and women or entities. Fairly, whenever you’re going through your information security threat treatment process (see Clause six over), you need to endure Annex A to determine what controls your