Defense in Depth
Defense in depth uses multiple layers of security controls to reduce risk.
Updated: 2026-03-06
Definition
Defense in depth combines preventive, detective, and corrective controls across layers (network, endpoint, identity, app).
If one control fails, others still limit impact.
Key points
- Layered controls
- Prevent + detect + respond
- Reduces single point of failure
Common mistakes
- Buying tools without integration and processes.
- Over-focusing on prevention and ignoring detection/response.
Related exams
Related terms
Want to practice this in exam-style questions?
Use the mini tests on each exam page, then continue in the app for offline packs and detailed explanations.
Go to exams