Least privilege
Least privilege is a security rule that says you should only give people and programs the access they need to do their job.
A system that follows least privilege limits what users and software can do. Instead of giving everyone full access, it gives only what's needed. This stops bad actors from moving around your network if they get in.
What it means
Least privilege is about controlling access. It means giving users and apps only the permissions they need to do their work. For example, a customer service rep might need to view orders but not change prices. This keeps sensitive data safe.
Why it matters
Without least privilege, a hacker who gets into one part of your system can move freely. They might access customer data, change settings, or even take over your website. It's a key part of keeping your business secure.
What to do
Review who has access to what. Use roles to set permissions. For example, a developer should have access to code but not financial records. Tools like access control lists or role-based access can help. Always ask: "Do they really need this?"