Here we have Number 2 in a series of simplifying the world we live in. I will attempt to keep it to the point. To dig deeper I will also link to a slightly more comprehensive explanation at the end.

What is the Principle of Least Privilege (POLP)?

The principle of least privilege is the idea that any user, program or process should have only the bare minimum privileges necessary to perform its function. It means revoking access from everyone and granting access only to those that specifically need it, whilst monitoring who has access and when. This reduces ways in which your systems can be attacked and infiltrated. It also makes tracking any breaches substantially easier.

To put it another way – your local post delivery engineer doesn’t need keys to your house and your car to deliver your mail. Also if you leave your door open, anyone could come in and steal your valuables or hide behind the couch!

What are the benefits of Least Privileges.

Improved security: Employees are not leaking trade secrets or stealing customer information.

Reduced attack surface (keep it simple!) ways that criminals can gain access to your data: Hackers only need one way in, don’t make it easy for them by providing multiple.

Limited malware propagation (that’s a fancy word): If you reduce privileges within an environment it makes it more difficult for malware to move through the system, limiting the harm it can do.

Improved Audit compliance : The less privileges an organisation has, the easier it is to track and monitor.

Zero Trust is a hot term in the industry right now as organisations look to implement this strategy. This means reducing the chance of human error to zero by removing access and privileges and being intentional about granting access ONLY to those that need it.

For a more comprehensive understanding download the white paper today!

Getvisibility – Use Case – Least Privileges