Least Privilege or Too Much?

About this interactive

Least privilege means giving a person, or a system, the least access it can do its job with. The Least Privilege lesson's scenario: Bev is senior, trustworthy and security conscious. She has access to the shared drives of every department, not because her work calls for it, but because it is handy for keeping tabs. Her computer is hit by ransomware through no fault of her own, and every drive she could reach is encrypted. Had her access covered only the folders she used, the damage and the restore would have been far smaller. So trust is not a reason for extra access. The account is what gets compromised, whoever owns it. The lesson lists the advantages: a smaller attack surface, less spread of malware such as ransomware, better performance, and protection against human error. And it applies least privilege to equipment, software, services and data: anything someone has access to. A quick test for each card: take away part of this access. Could the person or system still do the job? If yes, it was more than the job calls for.

What you'll learn

Judge whether a person's or system's access follows least privilege or gives more than the job calls for, across equipment, software, services and data
Recognize that trust and seniority are not reasons for extra access: a trusted person's account can still be compromised, and every extra share it reaches widens the damage

Aligned to

CompTIA Security+

4.6 Given a scenario, implement and maintain identity and access management.

ISC2 CISSP

7.4 Apply foundational security operations concepts

NIST 800-53

AC-6 Least Privilege

NIST CSF

PR.AA-05 Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties.

Key terms

Least Privilege: A security principle that grants users and systems only the minimum access rights needed to perform their functions.
Attack Surface: The total set of points in a system where an unauthorized user can attempt to enter or extract data.
Ransomware: A type of malware that encrypts a victim's files and demands payment in exchange for the decryption key.

Topics

Personnel Security Least Privilege Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →