An organization is implementing a policy that all administrative accounts must use a separate, privileged access workstation (PAW) for performing domain admin tasks. Regular user accounts may continue to be used on standard corporate laptops. Which security principle is being primarily enforced by this control?
