Supports the principle of "least privilege" by providing that only authorized individuals, processes, or systems should have access to information on a need$-$to$-$know basis.

$*$

Deterrent controls

Confidentiality

Incident

Availability