News for hackers. Stuff that matters.
Re:Personal data of 2.9M people leaked from Desjardins by shakna on Friday June 21, 2019 @02:26AM (#20240328)
Scope of Access Request is the usual implementation.

An employee should not be able to iterate millions of records without first asking for temporary powers.

You set the scope by measuring the usual required, and putting in a procedure for when and how much various supervisors can expand it.

Different departments will have different needs.

This stuff is already built in to industry standard software like SAP.

There are no comments on this comment yet.