What is the principle of least privilege?
The principle of least privilege means every person, service, and system gets only the access it needs to do its job. Nothing extra is granted by default. It limits the damage a compromised account or a mistake can cause.
What the buyer is really asking
Every company claims least privilege, so the word alone proves nothing. Explain the mechanics: what access a new hire starts with, how someone requests more, and how you catch access that is no longer needed.
Other ways buyers ask it
Every one of these wants the same answer:
- “Do you follow the principle of least privilege?”
- “How do you limit employee access to what they need?”
- “Is access granted on a need-to-know basis?”
Evidence to have ready
- An access control policy
- Role definitions and default permissions
- Access review records
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.