Which principle is demonstrated when a system restricts a worker to view only the current customer’s record?

Which principle is demonstrated when a system restricts a worker to view only the current customer’s record?

• A. Availability
• B. Confidentiality
• C. Integrity
• D. Least privilege

Answer: (D)

Least privilege is demonstrated when a system restricts a worker to view only the current customer’s record because access is limited to what is necessary to perform the task. By granting access solely to that specific record, the system minimizes what the user can see and modify, reducing the risk of exposing other customers’ data and making errors less likely. This approach supports stronger data protection by limiting exposure to only what’s needed for the job. While confidentiality is a broader goal of keeping information secret, the principle most clearly illustrated here is granting the minimum privileges required to perform the duties. Availability and integrity are related concerns, but they don’t capture this specific access-control pattern as precisely as least privilege.

Least privilege is demonstrated when a system restricts a worker to view only the current customer’s record because access is limited to what is necessary to perform the task. By granting access solely to that specific record, the system minimizes what the user can see and modify, reducing the risk of exposing other customers’ data and making errors less likely. This approach supports stronger data protection by limiting exposure to only what’s needed for the job. While confidentiality is a broader goal of keeping information secret, the principle most clearly illustrated here is granting the minimum privileges required to perform the duties. Availability and integrity are related concerns, but they don’t capture this specific access-control pattern as precisely as least privilege.