What Is Least Privilege?
An access control principle requiring users and processes be granted only the minimum permissions necessary to perform their function.
Least Privilege across 4 exams
Least Privilege appears on the following exams. Each defines it in the context candidates are tested on:
- CC
- An access control principle requiring users and processes be granted only the minimum permissions necessary to perform their function.
- CISSP
- The security principle of granting subjects only the minimum access rights necessary to perform their duties.
- CISA
- A security principle granting users and processes only the minimum access rights necessary to perform their assigned functions.
- A+
- A security principle stating that users and processes should be granted only the minimum access rights necessary to perform their required functions.