Explain the concept of defense in depth in cybersecurity.

• A. Relying on a single firewall to protect all assets.
• B. Training only after a breach occurs.
• C. Outsourcing all security to vendors.
• D. Multiple layers of controls across people, processes, and technology to reduce risk.

Answer: (D)

Defense in depth means layering protections so security isn’t backed by a single control. It combines people, processes, and technology into multiple safeguards that work together to prevent, detect, and respond to threats. Think of it as a series of barriers: security awareness training to reduce phishing, access controls to limit what each user can do, encryption to protect data, network segmentation and firewalls, monitoring and intrusion detection to spot unusual activity, regular patching, and tested backup and recovery plans. The goal is that even if one layer is breached, others remain to slow the attacker, reveal the intrusion, and minimize damage, thereby lowering overall risk.

This approach is better than relying on a single firewall, which creates a single point of failure. It’s more proactive than training only after a breach, which leaves you exposed in the meantime. And it’s more controllable and coordinated than outsourcing all security, which can abstract away responsibility and still leave gaps.