Access controls are built on three key principles.  List and briefly define them.

What will be an ideal response?

Least privilege: The principle by which members of the organization can access the minimum amount of information for the minimum amount of time necessary to perform their required duties.?Need-to-know: Limits a user's access to the specific information required to perform the currently assigned task, and not merely to the category of data required for a general work function.?Separation of duties: A control requiring that significant tasks be split up in such a way that more than one individual is responsible for their completion.