Least Privilege / Operational Convenience

Kind: tension

Record: tension:least-privilege-operational-convenience

Canonical: Schema

"least-privilege" (security-core layer) is traded against "Operational Convenience" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Operational Convenience" and choosing an explicit operating point.

Listed in Tensions, after Defense in Depth / Complexity and before Zero Trust Architecture / Latency/Complexity.

In tension with

Mechanism

Linked from