Control: ism-1268; Revision: 1; Updated: Sep-18; Applicability: ALL; Essential Eight: N/A ​

The need-to-know principle is enforced for database contents through the application of minimum privileges, database views and database roles.