Defense in Depth

Defense in depth is a security strategy that employs multiple independent layers of controls so that if one layer fails, others continue to provide protection. It applies the principle that no single security mechanism is foolproof, and combines preventive, detective, and corrective controls at the network, host, application, and data layers.

This layered approach significantly increases the cost and complexity of successful attacks.