Exam CSSLP topic 2 question 32 discussion

General Principle 1 of DACS emphasizes on ensuring the correct execution of software functions without being affected by security vulnerabilities. This principle generally includes three practices: The Principle of Least Privilege: A process or system should be given only the minimum access rights and permissions necessary to complete its designated task. Separation of Duties, Privileges, and Roles: A single user should not have authorization for all aspects of a system; rather different users with different roles and responsibilities must work together collaboratively in order to achieve the intended outcome. Assume Environment Data is Potentially Hostile: One cannot assume that input data from external sources will always be clean and accurate; hence all inputs must be validated before processing them in order to avoid potential threats coming from malicious attacks or errors, committed either intentionally by human beings or accidentally due to hardware issues etc.