What type of business policy would provide you with only the rights necessary to perform your job?
A) Split knowledge
B) Dual control
C) Separation of duties
D) Least privilege
E) You know you’re in trouble when the only rights you have are the ability to surf Reddit and shop on eBay
The answer: D) Least privilege
Least privilege is a policy that sets security limits that are tightly associated with a business task or person. Generally, management gets to choose the rights based on business requirements and the security team gets to administer the rights.
 |
Want to know more? Watch “Security Awareness.”When training your end user community, there are a number of security concerns that must be considered. In this video, you’ll learn which user habits, threat prevention techniques, and business policies should be implemented to keep everyone’s data as safe as possible. |