Defense in Depth

Defense in Depth is a security strategy that layers multiple protective mechanisms so that if one control fails, others continue to provide protection.

CISSP Relevance

Defense in Depth is a core concept in Domain 3 (Security Architecture and Engineering) and Domain 4 (Communication and Network Security).

The concept is documented in CISA Cybersecurity Best Practices.

Related terms: CIA Triad, Zero Trust