Which principle best minimizes data access risk for CX data?

• A. Data masking only.
• B. Least privilege ensures users have the minimum access needed.
• C. Open access for all employees.
• D. Access is granted by project lead.

Answer: (B)

The key idea is granting users only the minimum level of access they need to do their job. This is the principle of least privilege, and it directly reduces data access risk by limiting who can see or modify CX data. If a credential is compromised or a user strays from their role, the potential impact stays contained because access isn’t broader than necessary. Data masking helps when data is viewed, but it doesn’t prevent over‑reach if someone already has more access than required. Open access for all employees is unsafe and counterproductive, and letting a project lead grant access leads to inconsistent, unchecked permissions. Implementing least privilege, ideally paired with role-based access control and regular access reviews, provides the strongest, scalable protection for CX data.