CSO reports on a technology some say can “trump human weaknesses,” making data breaches due to human error less likely. “Least privilege management” operates on a need-to-know basis but allows access privileges to applications instead of individuals; however, it hasn’t been widely deployed among organizations, the report states. One expert said, “It’s nigh impossible to account for all types of user interaction with a system. But in interactions that are fairly small or focused, properly implemented least privilege would be a solid and nigh unusurpable control.” Another expert said the problem isn’t “unwitting employees but malicious attackers.”
Full Story