NISTNIST CSFProtect FunctionEASYFree question
What is the principle of least privilege and how does it apply to the Protect function?
- A.Giving administrators all possible permissions
- B.Granting users, processes, and systems only the minimum access permissions necessary to perform their functions, reducing the potential impact of compromised accounts or insider threats
- C.Allowing all users equal access to all systems
- D.Removing all privileges from standard users
Why B is correct
Least privilege limits access to what is strictly necessary, reducing the attack surface and potential damage from compromised accounts, malware, or insider threats.
Know someone studying for NIST CSF? Send them this one.