Principle of minimality and least privilege

2013/488/EU: Council Decision of 23 September 2013 on the security rules for protecting EU classified information · European Union

Only the essential functionalities, devices and services to meet operational requirements shall be implemented in order to avoid unnecessary risk. CIS users and automated processes shall be given only the access, privileges or authorisations they require to perform their tasks in order to limit any damage resulting from accidents, errors, or unauthorised use of CIS resources. Registration procedures performed by a CIS, where required, shall be verified as part of the accreditation process.

← anx_IV__cpt_1__cpt_2__cpt_4__point_17__point_b__text_1 · All articles · 18. →

Source: EUR-Lex (Cellar) · retrieved 2026-11-01 · Text as adopted (Official Journal); later amendments are not incorporated in this text.