What is Principle of least privilege?
In short
The principle of least privilege means each user, system or process is given only the access it needs to perform its role, and no more.
Key takeaways
- It limits the damage from mistakes, malware and compromised accounts.
- Access should be reviewed periodically and removed when roles change.
- Privileged accounts need the tightest restriction and monitoring.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
The principle of least privilege requires that: