Principle of least privilege
Also called: least privilege
Course: AP® Cybersecurity Shows up in: Unit 5: Securing Applications and Data
The idea that entities should get exactly as much access as they need to perform their function, and no more.
Appears in the course and exam description (CED): 5.2.C.7
Why it matters in Unit 5
Limits what an adversary can do with a compromised account.
Example
A receptionist can book appointments but not open medical notes.
Learn it properly, with a checkpoint 5.2 Protecting Applications and Data: Managerial Controls and Access Controls