The principle of least privilege is effective in helping prevent security breaches, however, prevention works best when applied with _______ and ______. Together, these three complete a security…

Footprinting is a reconnaissance technique used by attackers to gather information, not a security control triad component.

Scanning is a method for identifying vulnerabilities, which is part of prevention or detection, but not a fundamental leg of the security triad itself.

An attack is an adverse event that security measures aim to counter, not a component that works in concert with prevention within a triad.

Detection mechanisms, such as intrusion detection systems or Security Information and Event Management (SIEM) solutions, are crucial to identify when preventative controls have failed or been bypassed by an attacker. Effective detection allows for timely awareness of security incidents.

Response capabilities, including well-defined incident response plans and dedicated teams, are essential for containing, eradicating, and recovering from security incidents once detected. A swift and organized response minimizes damage, restores operations, and helps prevent recurrence.