What is Least Privilege?

Least privilege means each person can reach only the files, folders, and systems their role genuinely requires — nothing more.

Why it matters: if an account is compromised, the damage is limited to what that account could touch. Broad access turns one stolen password into a company-wide breach.

Practical example: a marketing intern's account is phished. Because the account only had access to marketing folders, the attacker cannot reach payroll or customer databases.

Getting started: review who can access sensitive folders, remove access nobody uses, and make 'need to know' the default when setting up new staff.