ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

The principle of complete mediation states that every access to every object must be checked for authorization every single time. Caching an authorization decision for 15 minutes means later requests are not re-validated against the current state of the token or the user's privileges, making the system vulnerable to revoked permissions or stolen tokens. Least privilege concerns the scope of permissions granted, economy of mechanism stresses simplicity of design, and segregation of duties addresses distribution of critical tasks-none of which specifically require re-authorizing each individual request.