Levels of confidentiality and information security requirements are documented in the Information Management Strategy. This strategy sets out how information will be handled throughout the programme, covering aspects such as access rights, data classification, storage, and dissemination protocols to protect sensitive information.

The MSP Practitioner specifies: “Confidentiality details are defined in Information management strategy,” indicating that this document governs the secure management of programme data and communication. It is essential that confidentiality levels are clear to prevent unauthorized access to sensitive information, which could jeopardize the programme’s success or breach legal and regulatory obligations.

While Quality Management, Resource Management, and Benefits Management Strategies address different governance aspects such as assurance, resource allocation, and benefit realization, they do not primarily deal with confidentiality.

Information management is critical for stakeholder trust, compliance with legislation (e.g., GDPR), and safeguarding intellectual property or competitive advantage. Clear documentation in the Information Management Strategy ensures that all programme participants understand their responsibilities regarding confidentiality, promoting consistent and secure handling of data.