An ISCM capability that ensures that people have the privileges necessary (and only those necessary) to perform their duties, to limit access to that which is necessary.
Source(s):
NISTIR 8011 Vol. 1
See Capability, Privilege and Account Management.
Source(s):
NISTIR 8011 Vol. 1
under Manage Privileges