Video transcripts

Transcript

1. 0:00At Pinnacle Dynamics,
2. 0:01the IT security team is finalizing a new set of access control policies.
3. 0:06The goal is to apply the principle of leased
4. 0:08privilege across every department system and user account.
5. 0:12Maya,
6. 0:12an invoice clerk,
7. 0:14receives a vendor invoice.
8. 0:16Her job is to verify the vendor and process the payment.
9. 0:19She can see vendor details through a secure application.
10. 0:22But she does not have permission to directly query the company's database.
11. 0:26This restriction ensures she can perform her duties without having
12. 0:30unnecessary access that could expose sensitive financial or customer data.
13. 0:35The IT team implements a combination of role based access control RBA,
14. 0:40application level permissions,
15. 0:41and database views.
16. 0:43This ensures that users,
17. 0:44services,
18. 0:45and processes can only access the specific resources they require.
19. 0:49Pinnacle Dynamics is also.
20. 0:51working on separate proposals for two major clients who are direct competitors
21. 0:56at the administrative level nondisclosure agreements or NDAs are signed
22. 1:01and only designated employees are assigned to each project.
23. 1:04Technically,
24. 1:05the IT team creates separate virtual networks,
25. 1:08servers and applications for each project,
26. 1:11granting access only to the authorized project team members.
27. 1:15Even senior leadership can only see information directly relevant to their role.
28. 1:20By enforcing the least privileged and need to know principles,
29. 1:24Pinnacle Dynamics reduces the attack surface,
30. 1:27prevents accidental data exposure,
31. 1:29and strengthens compliance with legal and contractual obligations.
32. 1:33These measures protect both company assets and client trust,
33. 1:37core pillars of the organization's security posture.