Confidentiality control is a process, policy, or technical rule that limits who can view sensitive information. In cybersecurity, it protects source code, credentials, vulnerability details, customer data, and business secrets from unnecessary exposure. Common examples include access control lists, role-based access, encryption, data classification, and approval workflows for sharing reports.
It matters because many attacks begin with information leakage. An intruder who steals internal documents, debug logs, or unreleased exploit details can move faster and target defenses more precisely. Good confidentiality controls also support defenders: they let security teams share only the minimum necessary information during vulnerability disclosure, incident response, and product support. In practice, they help balance secure reporting with trade secret protection, reducing both oversharing and under-reporting.