olemus
minimaalne tööülesannete täitmiseks vajalik teave,
lubade andmise alus vaikimisi keelavas pääsupoliitikas

CNSSI 4009-2015:
a criterion used in security procedures that requires the custodians of classified information to establish, prior to disclosure, that the intended recipient must have access to the information to perform his or her official duties

ülevaateid
https://security.stackexchange.com/questions/114966/difference-between-need-to-know-least-privilege-and-confidential

https://www.drware.com/security-the-need-to-know-principle/

https://en.wikipedia.org/wiki/Need_to_know

https://www.beyondtrust.com/blog/entry/what-is-least-privilege

https://vnclagoon.com/need-to-know-principle/

https://websites.fraunhofer.de/CIPedia/index.php/Need-To-Know