Defense in depth
- Term
- Defense in depth
- Exam
- CISA & CISM
- Definition
Layering multiple, diverse controls so one failure does not expose an asset.
- Explained
Defense in depth layers diverse preventive, detective and corrective controls so that one failure does not expose an asset — for example MFA, endpoint detection, segmentation and monitoring together.
- In practice
MFA, endpoint protection, segmentation and monitoring all protect the same database.
- Often confused with
- Single strong control
- Exam angle
Prefer combinations of preventive, detective and corrective controls.
- Related