Principle of Least Privilege definition

Principle of Least Privilege means a framework that requires users be given no more access privileges to systems than necessary to perform their normal job functions, and those privileges be granted no longer than the time required to perform authorized tasks.

Principle of Least Privilege means an information security model that restricts access to the specific data, resources and applications required to undertake a task to a specific user or entity;

Principle of Least Privilege means restricting access rights to the minimum privileges necessary for an individual to perform his or her role;

Principle of Least Privilege means that a user is given no more privilege than is required for the user to perform his or her duties and is given access only for as long as the user performs these duties. The Manufacturer must review and update User Access rights at least semi-annually.

Principle of Least Privilege means Users will only possess rights and have access to systems, applications and data that they require to do their job.

Principle of Least Privilege means the principle where a user is given the minimum levels of access or permissions needed to perform a task;

Principle of Least Privilege means that in a particular abstraction layer of a computing environment, every module (such as a process, a User, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose. For example, Users must only be granted access to Buyer Electronic Information or Buyer Electronic Information Assets on a need-to-know basis and to the extent such access is required for his/her assigned job function. “Production System” means computer system used to process an organization's daily work or a system or environment with which Users interact. “RBAC” means Role-Based Access Control. “Remote Access Systems” mean applications that allow a User to connect to a computer network from a remote location, such as Citrix and VPN. “Security Event Monitoring System” means a system for holistic monitoring of an organization’s security controls. “Security Patch Management” means identifying, acquiring, analyzing, and testing Security Patches, as well as planning, communicating, implementing, and verifying their deployment. “Security Patches” mean a software or computer system patch that is intended to correct a security vulnerability in that software or system. “Service Account” means an account used for servicing a computer system that may be used by more than one User. “Shared Account ID” means an Account ID shared between two or more Users. “Standard Build Image” means a copy of complete and functioning computer system that can be simply copied to a new system. “Standard Configuration” means specific asset configuration parameters approved by Exelon . “Standard Configuration Documents” means the documentation that defines the specific asset configuration parameters approved by Exelon. “TLS 1.2” means Transport Layer Security 1.2, a cryptographic protocol defined in Request for Comment (RFC) 5246 (August 2008) that provides communications security over a computer network. “User” means any Person able to access Buyer’s Electronic Information on Contractor’s Electronic Information Assets or Buyer’s Electronic Information Assets. “VPN” means a virtual private network which extends a private network across a public network or the Internet and enables Users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network. “Wireless Device” means any type of device that communicates with other devices without needing a physical connecti...