Stage 1 · Lesson 3 of 7
Least privilege and who is asking
answers "who are you?" and authorisation answers "what may you do?". means every person, service and process gets only the access its job needs, for only as long as it needs it. In AI systems this matters twice over.
A model that calls tools acts with whatever credentials those tools hold, so a tool running with an admin key turns any manipulated conversation into an admin action. The habit to build now: every action is checked in code against the real signed-in user, and every service account has a narrow, named purpose. Separate read from write, and per-user data from shared data.
Common trapone powerful service account shared by every feature because it was quicker to set up, which makes every bug as bad as the worst one.
A question to check yourself, an AI practice session and 2 cheat sheet entries come with the full roadmap. Unlock
Resources for this stage
Start with· follow one of these
- RoadmapFreeSefism Cybersecurity Roadmap
Sefism · Beginner
Sefism's general security roadmap, for any foundation in this stage you want to study in more depth
- CourseFreeProfessor Messer's Security+ (SY0-701) Course
Professor Messer · Beginner
Free videos covering the core security concepts, from access control to cryptography
Practise
Keep handy
Also worth your time
The four questions, diagrams and STRIDE in one practical page
- roadmap.sh: Cyber SecurityGo deeper
A map of the wider security field, so you know where AI testing sits