A note from Sary

Limited Authorization is a straightforward principle: it's best to limit each individual's ability to act in areas that are outside the scope of their respon-sibilities. If access to an asset or authorization isn't required or necessary, it should be withheld by default. If access or authorization is needed in special cases, it should be granted on a temporary basis and in a way that preserves Segregation of Duties by requiring more than one person to authorize the action.

Sary The Personal MBA, page 200 · November 3, 2023 Save to shelf
Notes like this take four seconds in Booksense. Scan the paragraph, it lands on the right page, and comes back for review later. Take your first note

More from readers of The Personal MBA

Sary p. 350

More from Sary

See their profile

Stop losing the best parts of what you read.

Booksense pushes your highlights back to you for review, so a note from page 174 is still yours a year later. Free on iOS.

Sary on Booksense 1,235 notes 212 hours of reading