Privacy and confidentiality concerns are major reasons for companies to abstain from sharing their process data. Privacy concerns refer to personal data and have been addressed in existing work by providing privacy-preserving techniques for event logs. However, the concept of confidentiality in process data pertaining to, e.g., sensitive business data, remains unclear. This work addresses confidentiality of process data based on the privacy and confidentiality engineering method (PCRE). PCRE interactively explores privacy and confidentiality requirements with process stakeholders and defines privacy-preserving actions to address possible concerns. We co-construct and evaluate PCRE based on structured interviews with process analysts in two manufacturing companies. The goal is to systematically scrutinize process data and balance the trade-off between privacy and utility loss.