To ensure confidentiality, workers should only access confidential information for work that is not covered by their job description and the policies and procedures of the organisation.