The Principle of Least Privilege

When performing IT audits, the Principle of Least Privilege is a term you may hear thrown around quite a bit, but how many novice auditors new to IT audit actually understand what is implied by this within an IT environment? From my experience, not many.

The most common place I see the term surface is when assessing firewalls, but the same principle […]