Need to Know
Need to know is the fundamental security principle that access to classified information should be limited to individuals who require that specific information to perform their official duties. Having a security clearance alone is not sufficient for access.
Quick Facts
| Principle | Access limited to job requirements |
| Determination | Made by information holder or supervisor |
| Applies to | All classified information |
| Clearance relationship | Clearance is necessary but not sufficient |
The Two Requirements
To access classified information, you must satisfy two independent requirements[1]:
- Appropriate clearance level - Your clearance must be at or above the classification level
- Need to know - You must require that specific information for your job
Both conditions must be met. A Top Secret clearance holder cannot access all Top Secret information - only the specific information relevant to their duties.
How Need to Know Is Determined
Need to know determinations are made by[2]:
- The information holder - The person or office controlling the document
- Your supervisor - Who understands your job requirements
- Program managers - For compartmented or program information
This is not a one-time determination. It applies each time you request access to classified information.
Examples
Access granted:
- An analyst working on a project can access classified reports related to that project
- An IT administrator can access system documentation for systems they maintain
- A briefer can access materials they need to prepare presentations
Access denied:
- An analyst cannot access other projects just because they hold the same clearance level
- Personal curiosity does not establish need to know
- "It might be useful someday" does not establish need to know
Your Responsibilities
As a clearance holder, you have obligations regarding need to know[1]:
Before sharing information:
- Verify the recipient has appropriate clearance
- Verify the recipient has need to know
- When uncertain, check with your security officer
When requesting information:
- Be prepared to explain why you need it
- Accept that access may be denied
- Do not pressure others to share
Need to Know vs. Compartmentalization
Need to know operates at all classification levels, while compartmentalization (SCI, SAP) adds formal structure[3]:
| Need to Know | Compartmentalization |
|---|---|
| Applies to all classified info | Applies to specific programs |
| Informal determination | Formal read-in process |
| No special markings | Specific compartment markings |
| Ongoing judgment calls | Documented access lists |
Compartmented information still requires need to know - you must need the specific information, not just be read into the compartment.
Related
References
- ^ Executive Order 13526: Classified National Security Information. National Archives. Accessed 2026-01-08.
- ^ Executive Order 12968: Access to Classified Information. National Archives. Accessed 2026-01-08.
- ^ ICD 704: Personnel Security Standards and Procedures Governing Eligibility for Access to SCI. Office of the Director of National Intelligence. Accessed 2026-01-08.