3 Least Privilege

Compliance and Security Frameworks · 3:39

Listen on 93

Lyrics

[Verse 1]
Sarah starts her Monday morning, logging in to do her job
She's in accounting, needs the numbers, but the system's like a mob
Every folder, every database, wide open to her eyes
She can see the HR records, legal files, and salary ties

[Pre-Chorus]
But just because you can access
Doesn't mean you should possess

[Chorus]
Least privilege, least privilege
Give the minimum to get the job done
Least privilege, least privilege
Lock it down for everyone
Only what you need to succeed
Nothing more, that's the creed
Least privilege keeps us safe and sound

[Verse 2]
Marcus joins the marketing team, fresh-faced and ready to go
Admin gives him full permissions, every system, high and low
He can read the source code secrets, modify the client base
Delete the financial records, leave barely a trace

[Pre-Chorus]
When you open every door
You're just asking for much more

[Chorus]
Least privilege, least privilege
Give the minimum to get the job done
Least privilege, least privilege
Lock it down for everyone
Only what you need to succeed
Nothing more, that's the creed
Least privilege keeps us safe and sound

[Bridge]
Access to information systems
Limited by design
Minimum necessary access
Keeps everything in line
Your assigned duties define
What you get to see
Anything beyond that scope
Creates vulnerability

[Verse 3]
Policy says it crystal clear, no room for interpretation
Limit access to the minimum, across the whole organization
Job performance is the measure, not convenience or request
When you follow least privilege, you're simply at your best

[Final Chorus]
Least privilege, least privilege
Give the minimum to get the job done
Least privilege, least privilege
Lock it down for everyone
Only what you need to succeed
Nothing more, that's the creed
Least privilege keeps us safe and sound
Keeps us safe and sound

[Outro]
Minimum necessary
That's the way to be
Least privilege policy
Sets your data free

← 2 Separation of Duties | 4 Fail-Safe Defaults →