6.2.1 The Principle of Least Privilege

We must comprehend the least privilege principle to appreciate the value of just-in-time access (PoLP). More entry points for cybercriminals are a consequence of giving users in an organization too much access. The industry discourages standing access for this reason.

With PoLP, you can only grant privileged access to a single resource or during a defined window of time with each grant. As a result, a malevolent insider has less leeway to maneuver and cause harm. Since most cyberattacks rely on abusing privileged accounts, PoLP generally lowers the likelihood of cybercrime. Additionally, when privileges expire, malware cannot spread as quickly.