Least privilege access: The security control that stops attacks after login

This document explains the principle of least privilege (POLP), how it mitigates post-authentication attacks such as privilege escalation and lateral movement, and how POLP complements Zero Trust. It outlines practical controls—application allowlisting, application restriction (ringfencing), privileged access management, Zero Trust Network Access, and cloud access controls—and positions ThreatLocker’s products as solutions to enforce these controls.