Giving every person and service only the access it needs for its job, so a compromise exposes as little as possible.