Least Privilege

The principle of least privilege dictates that users and systems should only be granted the minimum levels of access (privileges) necessary to perform their required functions. This limits the potential damage if an account is compromised via phishing or other means. Training can help users understand why they have certain access levels and the importance of not seeking unnecessary privileges.