CORE

Least privilege

Giving a person or system only the access it needs to do its job, and nothing more.

For small firms

The single highest-leverage habit for a small firm: review who has admin access and remove it from anyone who doesn't use it weekly.

Related terms

IAM Role-based access control Granting access based on a person's role, not configuring each account by hand. IAM Privileged access management Extra controls around the small number of highly powerful admin accounts. CORE Separation of duties Splitting a sensitive task across more than one person to prevent abuse.
← Back to Security fundamentals