D4 · Operations

What is the principle of least functionality?

The principle of least functionality states systems should only run the minimum services, features, and capabilities required for their purpose — nothing more.
Closely related to least privilege (for users) and attack surface reduction. Every unnecessary service = additional attack surface. Disable unused protocols, services, accounts, and features on every system.
← Back to Glossary Practice Questions →