CIA: Confidentiality, Integrity, Availability — the three properties security protects.
AAA: Authentication (who are you?), Authorization (what can you do?), Accounting (what did you do?).
Least privilege: give the minimum access needed. Defense in depth: never rely on one control. Phishing remains the #1 way attackers get in.