the property that information is not made available or disclosed to unauthorized individuals, entities, or processes.
(SOURCE: JIS Q 27000:2019, 3.10)
An entity can also be referred to as a "substance," "subject," etc. In the context of information security, it means those such as organizations and people that use information, and equipment, and/or the software and physical media that handle information.