The requester of sensitive information should not receive access just because of his or her clearance, position, or rank. The requester must also establish a valid need to see the information. The term for this is ________.

a. least privilege
b. need to know
c. confidential information declassification
d. access control