Assuring that each user or process can only do the minimal actions for which it is authorized is called:
a. Threat removal
b. Least privilege
c. Minimalism
d. Separation of duties