2.2 Principle of Least Privilege

The principle of least privilege refers to the concept that users should only be granted to the bare minimum of rights and permissions that are needed to perform their job. You don’t want to provide more privileges to a user who doesn’t need it. Users accounts should have limited privileges. Applications should run with limited privileges. Consequently, you should not allow all users to have user accounts with administrative privileges. This helps to limit the scope if a hacker or malware is able to gain access to a user’s account or computer.