Data from Information Repositories Mitigation

To mitigate adversary access to information repositories for collection: * Develop and publish policies that define acceptable information to be stored * Appropriate implementation of access control mechanisms that include both authentication and appropriate authorization * Enforce the principle of least-privilege * Periodic privilege review of accounts * Mitigate access to <a href="/mitre/techniques/T1078">Valid Accounts</a> that may be used to access repositories