This is the principle in which a computing environment where every module $($such as a process, a user, or a program, depending on the subject$)$ must be able to access only the information and resources that are necessary for its legitimate purpose.

secure the weakest link first.

fail safe.

least privilege.

economize.