Least privilege

The principle that every account, service or process gets only the access it needs to do its job, and loses access it no longer uses. If an account is stolen or a program is compromised, the attacker can then do far less. In practice: do not give everyday accounts admin rights, and regularly review the rights of service accounts and contractor accounts.

Further reading: csrc.nist.gov

All terms