The server stood alone, sealed off from the network, a vault of code and data no packet could touch. This was an air-gapped system — no internet, no external connections, no backdoors. It was built for security at the highest level. But isolation alone isn’t enough. True defense means combining air-gapping with the principle of least privilege.
Least privilege means every account, process, and service gets only the permissions it needs — nothing more. No broad access, no unchecked powers. In an air-gapped environment, this principle prevents internal misuse just as physical isolation blocks external threats. It limits blast radius. If one account is compromised, damage stops at the edge of its role.
Without least privilege, even an air-gapped system can fail. Malware can move inside through removable media or insider access. Poor permission hygiene lets it spread, read sensitive data, or disrupt operations. Air-gap security reduces vectors but least privilege stops escalation. Together, they create layered protection: isolation outside, restriction inside.