What does the concept of "Defense in Depth" refer to?

• A. A singular security protocol applied across the organization
• B. A strategy using multiple layers of defense
• C. A method to track network access
• D. A process for risk assessment

Answer: (B)

The concept of "Defense in Depth" refers to a strategy that employs multiple layers of security controls to protect information and resources. This approach is based on the idea that relying on a single security measure is insufficient to safeguard an organization against various threats. By implementing several layers of security, such as firewalls, intrusion detection systems, antivirus software, and physical security measures, an organization can create a more resilient security posture.

If one layer is breached, additional layers remain to provide protection, which reduces the likelihood of a successful attack. This multi-faceted approach allows for a more comprehensive strategy to protect against the diverse range of threats that can target an organization. This concept emphasizes the importance of redundancy and the reliance on a combination of security measures working together to enhance overall security.