CISSP Study Plan – Day 13 of 55 | Need-to-Know vs. Least Privilege
- Luke Ahmed
- Sep 22
- 2 min read
"The ability to distinguish the difference between need to know and least privilege is madly overlooked for this exam! Great work Yani!"– Luke Ahmed
Today is Day 13 of Yihenew’s CISSP study plan, focusing on Need-to-Know vs. Least Privilege — two access control principles that often get confused on the exam.
Key Areas Covered:
Need-to-Know — restricts access to only the specific information required for a task
Least Privilege — gives users the minimum level of access rights to perform their job
CISSP Exam Tie-In — need-to-know focuses on information, least privilege focuses on permissions
Real-World Connection — both reduce risk of insider threats and accidental data exposure
Quick CISSP Practice QuestionWhich principle ensures a financial analyst can only view salary reports, but not modify them?
A. Separation of Duties
B. Need-to-Know
C. Least Privilege
D. Accountability
✅ Correct Answer: B. Need-to-Know
Explanation: Need-to-know restricts access to information based on job role. Least privilege relates to the level of access granted, while separation of duties divides responsibilities.
👉 Can you take the Yani Challenge?
55 days of consistent CISSP prep, tackling one domain at a time, using only the resources below:
Course
Luke's CISSP Course (2 months access, $89.98)
One-to-one Zoom sessions with Luke Ahmed (2 weeks before exam)
Books, Notes, and Practice Questions
All-In-One Study Guide by Shon Harris (Around $45)
Sybex 10th Edition (Around $52.55)
Total Cost: approxiamately $250 depending on your geographic location. Yani is located in East Africa.
📚 Study Plan (55 Days of Dedication):
- Weekdays: 2–3 hours of focused study—late nights and early mornings (5 AM).
- Weekends: 5–6 hours of deep study sessions.
Pass CISSP in first attempt within 100 questions.
Yani's biggest expense was his time, committment, consistency, and dedication! It was worth it because he passed first attempt in 100 questions using the above resources only.
If Yihenew could do it, so can you.
All the best Future CISSP. You can feel free to contact me anytime as well.
Thank you.
Luke Ahmed
