Module 1~8 min
Security Principles in Practice
Beyond the CIA triad, a few practical principles guide how security is applied day to day.
What You'll Learn
- What "least privilege" means
- What "defense in depth" means
- How these principles reduce risk
Least Privilege
The principle of least privilege means giving people and systems only the access they actually need to do their job -- nothing more. This limits the damage if an account is ever compromised.
Defense in Depth
Defense in depth means using multiple layers of protection, so that if one layer fails, others are still in place. Relying on a single safeguard leaves a system fragile.
Example
An organization might combine a firewall, antivirus software, and staff security training together -- so that if one layer is bypassed, the others still provide protection.
Key Concepts
Least PrivilegeDefense in DepthLayered Security
Key Takeaways
- Least privilege limits access to only what's needed
- Defense in depth uses multiple layers of protection
- No single safeguard should be relied on alone
Knowledge Check
What does the principle of "least privilege" recommend?