Restrictive defaults: A security principle that advocates for configuring systems with the most secure settings by default. This approach limits access and permissions to the minimum necessary, requiring explicit granting of additional access by users or administrators to ensure security and prevent unintended access or breaches.
Categories: CC D5: Security Operations | CCSP D3: Cloud Platform and Infrastructure Security | CISM D3: Information Security Program | CISSP D5: Identity and Access Management (IAM) | Security+ D1: General Security Concepts | SSCP D2: Access Controls
« Back to Glossary Index