An ISCM capability that ensures that people have the privileges necessary (and only those necessary) to perform their duties, to limit access to that which is necessary.
Source(s):
NISTIR 8011 Vol. 1
under Capability, Privilege and Account Management
See Capability, Privilege and Account Management.
Source(s):
NISTIR 8011 Vol. 1