CYBERSECURITY

Least Privilege

The security principle that every user, account, and process should have only the minimum access required to do its job, and no more. Limits the blast radius of a compromise.

IN PRACTICE

Applying least privilege, a marketing user cannot reach the finance database. If their account is phished, the attacker gains only what marketing could access.

← Back to glossary