Need to know means that if you don’t need to know to do your job, then you don’t need access to it. For C-Suite, this means removing access to a lot of data that the C-suite does not need access to do their jobs… C-suite has staff that needs to know and needs access but the C-suite does not need access. This might offend some, but it’s really in the self-interest of the executive… Failure to hold C-level users to the same standards as other employees can be a fatal mistake, as C-level executive are heavily targeted individuals in any organization.