Traditional approaches to network security are no longer sustainable in the cloud age, meaning companies have to adapt quickly. With more remote working, applications have left the secure perimeter, and many employees require reliable access to applications and a secure cloud environment in which to work. To meet the security demands of the modern world, the principle of least privilege has made a comeback – with zero trust approaches built on foundations that were laid long ago.
The concept of zero trust is based on the idea of each user starting with zero access rights to a system by default. This starting point ties in with the tried-and-tested principle of least privilege, in which users are only granted access to information and resources in response to a legitimate need. No one is automatically trusted, everything must be questioned and rights are granted in stages and validated on an ongoing basis.
Read more at – InfoSecurity Magazine: Least Privilege Regaining Popularity