What is the principle of least privilege (PoLP)?

This episode of Techsplainers introduces the principle of least privilege, a core cybersecurity concept that limits users, applications and machine identities to only the access they need, only for as long as they need it. The episode explains how least privilege fits within identity and access management, reducing the blast radius of compromised credentials while ensuring that legitimate users have the access they need when they need it. The discussion also explores why least privilege has become more urgent as nonhuman identities like service accounts and AI agents multiply across modern environments. Finally, it looks at the operational side of enforcement, including privileged access management, identity governance and different access control models. Find more information at https://www.ibm.com/think/topics/principle-of-least-privilege Find more episodes: https://www.ibm.biz/techsplainers-podcast Narrated by Dan Nosowitz