Defense in depth is the practice of layering several independent controls so that the failure of any one does not leave an asset exposed. No single control is perfect: firewalls get misconfigured, users click phishing links, patches arrive late. If you layer controls of different kinds, an attacker has to defeat several of them, which takes more time and creates more chances to be detected.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.