Users and Software should be granted the fewest privledges necessary to perform their tasks

System access should be permitted only where explicitly granted; the default should be to deny access

The system configuration should be as simple as possible

System access should be restricted only where explicitly necessary; the default should be to grant access to everything