What requires that a user or process be granted access to only those resources necessary to perform assigned functions?
What technique would raise the False Accept Rate (FAR) and Lower the False Reject Rate (FRR) in a fingerprint scanning system?
A policy that states a user must have a business requirement to view data before attempting to do so is an example of enforcing what?