Isn’t the most basic requirement an understanding of confidential/secret data and taking steps to maintain secure communications?
I would think so.