📚 Topic Summary
The Principle of Least Privilege (PoLP) is a cybersecurity concept where users are given the minimum level of access needed to perform their job functions. Think of it like this: a cashier needs access to the cash register, but they don't need access to the manager's financial reports. By limiting access, we reduce the risk of accidental or malicious misuse of sensitive information. This 'unplugged' activity helps you understand PoLP without needing computers!
Imagine a school play. Each person has a specific role. The stage manager needs access to the props and stage, but not the costume designs. The actors need their costumes but don't need to change the script. This ensures everyone can do their job effectively and safely, without accidentally messing something up or seeing confidential information.
🧠 Part A: Vocabulary
| Term |
Definition |
| 1. Privilege |
A. The minimum level of access needed to perform a task. |
| 2. Authorization |
B. Permission granted to access specific resources or data. |
| 3. Access Control |
C. The process of verifying a user's identity. |
| 4. Least Privilege |
D. A right or permission granted to a user. |
| 5. Authentication |
E. Security measures used to regulate access to resources. |
Match the term to the correct definition. (Answers: 1-D, 2-B, 3-E, 4-A, 5-C)
✍️ Part B: Fill in the Blanks
The Principle of __________ __________ states that a user should only have the __________ necessary to perform their job. This reduces the risk of __________ and accidental __________ of data. Implementing this principle is a key part of a strong __________ strategy.
(Answers: Least, Privilege, malicious, misuse, security)
💡 Part C: Critical Thinking
Why is it important to apply the Principle of Least Privilege in a hospital setting, considering the sensitive patient data involved? Give 2 specific examples.