Compartmentalization (need-to-know)

• Difficulty: Intermediate
• Estimated effectiveness: Very high for protection
• Time to implement: Structural, to be designed upstream
• Fields of application: Information security, Governance, Compliance, Project management
• Synonyms: Siloing, Need-to-know, Least privilege
• Tags: compartmentalisation, need-to-know, siloing, confidentiality, security

Compartmentalisation is a defensive and perfectly legitimate technique: it protects information by fragmenting it, without deceiving anyone. Its strength is to mechanically reduce the risk of a leak and to limit its impact. Its limitation is operational: over-siloing hampers coordination, deprives actors of a necessary overview and can establish a counterproductive climate of secrecy.

To be put in place as soon as sensitive information must circulate between several actors with distinct needs. To be calibrated: siloing must serve security without paralysing the decision. Pointless for mundane information or information meant to be shared widely.

Here, the "counter-measure" reads in reverse: Recognise that someone is trying to circumvent your siloing, through insistent cross-checking and converging questions from several interlocutors. Neutralise: maintain the need-to-know principle and refer each person back to their remit. Turn it around: centralise cross-checking requests with a single point of contact who will log attempts to aggregate information.

Compartmentalisation is lawful and recommended, but it must not serve to conceal legally owed information: siloing cannot cover a fraudulent concealment (art. 1137 of the French Civil Code) nor screen an obligation of transparency (informing employees, accounting obligations, GDPRi). Security through secrecy finds its limit in the right to information of those who are legally entitled to it.

Complements the Canary Trap (no. 239) and Gray Rock (no. 241). Opposes the False Flag (no. 238) and the Honeypot (no. 240), which it thwarts. Close to the Principle of least privilege and Access segregation.

• Ross Anderson, Security Engineering, 3rd ed., Wiley, 2020 (the principle of least privilege).
• NIST, Special Publication 800-53: Security and Privacy Controls, revision 5, 2020.
• Regulation (EU) 2016/679 (GDPR), articles 5, 13 and 14 (transparency and information of data subjects).

• Protect sensitive information (BATNA, reserve price, internal constraints) by revealing it only to those who strictly need it.
• Reduce leaks and the risk that a third party or the other side reconstructs your strategy by piecing together fragments.
• Preserve room for manoeuvre and the element of surprise by keeping concessions or options in reserve, out of the opponent's reach.
• Silo the teams (technical, legal, financial) to prevent an isolated link from inadvertently committing to or betraying the overall position.
• Control the tempo: reveal each piece of information only at the tactically opportune moment.

Sales - M&A: target team siloed before the announcement: During an acquisition, the buyer organises its due diligence into watertight cells: the finance team accesses the accounts, the HR team the headcount, but none has the complete view of the target price or the post-merger strategy. Only the restricted committee knows the reserve price. This siloing (often supported by project code names and data rooms with segmented access) limits leaks to the market and prevents the target from guessing how high the buyer is prepared to go. A scenario representative of standard deal-making practice, not attributed to any specific transaction.

Diplomatic - multi-party negotiation through separate channels: In a multi-party mediation, the mediator meets each delegation separately (shuttle / caucus) and passes on only the elements each explicitly authorises them to relay. Each party is unaware of the exact red lines of the others, which avoids rigid public postures and allows compromises to be explored without loss of face. A generic illustration of how shuttle mediation works.

• Over-siloing to the point of paralysing your own team: field negotiators lack the information to decide and let opportunities slip.
• Confusing compartmentalisation with lying: withholding information does not authorise asserting falsehoods, on pain of fraud and a breakdown of trust.
• Forgetting that information circulates through cross-checking: cross-leaks between cells or non-verbal signals can reconstruct what you believed protected.
• Siloing without central coordination: without a single point holding the overall view, the team contradicts itself or makes inconsistent concessions.
• Applying excessive siloing to a long-term partner, which signals distrust and damages the relationship.

• Roger Fisher, William Ury (1981) Getting to Yes: Negotiating Agreement Without Giving In Houghton Mifflin
• Thomas C. Schelling (1960) The Strategy of Conflict Harvard University Press