Gary was recently hired as the first chief information security officer for a local government AGency. the AGency recently suffered a security breach and is ATTempting to build a new information security program. gary would like to apply some best practices for security operations as he is designing this program. askGary DECides what access permissions he should Grant to each user, what principle should guide his DECisions about default permissions? revocation, Defense in DEPth, least privilege, or separation of duties