Least privilege means users and systems have only the access they need. No more. This limits damage when accounts are compromised.
Why it matters:
- Compromised accounts access only permitted resources
- Insider threats are contained
- Accidental mistakes affect fewer systems
Implementation:
- Start with no access. Add permissions as needed.
- Regularly revoke unused permissions
- Use time-limited elevated access
- Separate admin accounts from daily-use accounts