uploading documentationHEADmaster

1 files changed, 20 insertions, 0 deletions

diff --git a/genesishosting/access/least-priv.md b/genesishosting/access/least-priv.md
new file mode 100644
index 0000000..00f85ac
--- /dev/null
+++ b/genesishosting/access/least-priv.md
@@ -0,0 +1,20 @@
+# Least Privilege Policy
+
+Genesis Hosting enforces least privilege access for all systems.
+
+## Principles
+
+- Users are given the minimum level of access necessary to perform their work
+- Admin tools are isolated by function (e.g., billing vs. system access)
+- Escalation of privileges must be requested, documented, and time-bound
+
+## Tools in Use
+
+- WHMCS permissions are restricted by group
+- SSH access is limited using `AllowUsers` and firewalled IPs
+- TeamTalk server admins are rotated and audited monthly
+
+## Review Cycle
+
+- Access roles are reviewed quarterly
+- Logs of access changes are stored and rotated every 90 days