Defense in depth is a security strategy that uses multiple layers of controls to protect assets. If one layer fails, additional layers provide continued protection. This approach includes physical security, network security, host security, application security, and data security. Each layer implements different types of controls: preventive, detective, and corrective. Defense in depth recognizes that no single security measure is sufficient, and comprehensive protection requires overlapping safeguards.
Cybersecurity