Which term is defined as Users receive minimum access necessary for tasks?

• A. Compliance monitoring
• B. Principle of Least Privilege
• C. Audit controls
• D. Access transformation initiatives

Answer: (B)

Limiting user access to the minimum necessary to perform tasks is the principle of least privilege. This concept is the foundation of secure access control: granting only the rights each user truly needs reduces the risk of abuse, mistakes, or breaches and confines the impact if an account is compromised. In practice, it’s implemented through role-based access control, need-to-know policies, and approaches like just-in-time or time-limited access, with periodic reviews to remove any excess permissions. Other terms describe monitoring, auditing, or initiatives to adjust access, but they don’t define the core practice of giving the smallest set of rights needed, so this principle is the most accurate fit.