# Operational security concepts ## Separation of duties, least privilege ## Job rotation, mandatory vacations ## Need-to-know vs least privilege