Tech Workplace Dictionary

The principle of granting only the access needed for a task and no more.

A structured description of assets attackers trust boundaries threats and mitigations for a system.

A weakness that can be exploited to compromise confidentiality integrity or availability.

A security approach that continuously verifies access instead of trusting requests based only on network location.