What is the practice of giving an employee access to only the resources needed to accomplish their job?

A company receptionist received a threatening call referencing stealing assets and did not take any action assuming it was a social engineering attempt. Within 48 hours, multiple assets were breached, affecting the confidentiality of sensitive information. What is the threat actor in this incident?

An analyst received an alert on their desktop computer showing that an attack was successful on the host. After investigating, the analyst discovered that no mitigation action occurred during the attack. What is the reason for this discrepancy?

Drag and drop the technology on the left onto the data type the technology provides on the right.

Which category relates to improper use or disclosure of PII data?