Which of the following risk mitigation strategies will allow Ann, a security analyst, to enforce least privilege
User rights reviews
Risk based controls
Annual loss expectancy
A least privilege policy should be used when assigning permissions. Give users only the permissions and rights
that they need to do their work and no more.