NIST 800 -171 3.1.5
Employ the principle of least privilege, including for specific security functions and privileged accounts. What is the principle of least privilege? It is when you give a person’s account the bare minimum of permissions and capabilities they need to do their job. You basically lock their account down to the point that they can’t access…