Defense in Depth
Definition
Defense in Depth is a security strategy that uses multiple layers of controls so that if one safeguard fails, others still protect the system. It reduces reliance on any single tool or barrier by combining preventive, detective, and corrective measures across people, process, and technology.
Examples
- A company uses MFA, least privilege, endpoint protection, and network segmentation so a stolen password alone does not lead to a full breach.
- A web application is protected by secure coding practices, a WAF, logging, and incident response playbooks so attacks are blocked, detected, and handled quickly.
Discover 🔎
Many security failures happen because an organization depends on a single control. If that one control is bypassed or misconfigured, the attacker has a clear path. Defense in Depth is the idea of building security like a series of safety nets. You assume something will fail eventually, so you design the environment so one failure does not become total compromise.
Tip: The interactive version includes progress tracking, decks, and premium deep dives.