“Need to know” is a bedrock tenet of information security. You only get to see it if you need to see it. The reasoning is that the fewer people who know the details, the lower the risk that information will be compromised by reaching the competition. Another term used among professionals is the “principle of least privilege,” borrowed from the notion in computer science that a user account should be given only that level of privilege that is absolutely necessary to its operation within the system, making failures less likely. By whatever name, the principle increases control by limiting access. The idea that any one person in an organization probably doesn’t need to know much is rooted in the industrial revolution. When we moved from the age of craftsmen who made an entire product to the assembly line, the worker mounting the wheel didn’t have to know anything about the rest of the car…. Keeping secrets has long been viewed through the same lens: compartmentalization helps keep things under control. But interestingly, it doesn’t always make things more efficient or productive.
Recent Posts
- CAFC: Jury Instructions Must Address Each Objective Indicia of Nonobviousness Raised by Patent Owner
- Massive Replication of Comments Submitted to NIST March-In Rights RFI Should Cause Concern
- Lourie Dissents from CAFC View that Heart Valve Transport was Not Infringing
- Rader’s Ruminations – Patent Eligibility II: How the Supreme Court Ignored Statute and Revived Its Innovation-Killing Two-Step
- Other Barks and Bites for Friday, March 22: French Watchdog Hits Google with €250 Million for IP Breaches; C4IP Releases First Congressional Innovation Scorecard; EPO Sees Record Number of Patent Applications