Principle of Least Privilege

The principle of least privilege (PoLP) is the simple idea that every person, app or system should be given only the access it genuinely needs to do its job, and nothing more. Someone on the sales team does not need the keys to the payroll system, so they are never handed them in the first place.

Think of a hotel key card that opens your own room and the gym, but not every other guest's door or the manager's office. Keeping access this tight means that if one account is stolen or one person makes a mistake, the damage is boxed in rather than spreading everywhere. It is one of the most effective and least expensive habits a business can adopt.