Defense-in-depth

{
  "id": "MLC-T-CYB-001290",
  "term": "Defense-in-depth",
  "field": "Cybersecurity",
  "definition": "1. Information security strategy integrating people, technology, and operations capabilities to establish variable barriers across multiple layers and dimensions of the organization.\n\n2. Information security strategy integrating people, technology, and operations capabilities to establish variable barriers across multiple layers and missions of the organization.\n\n3. An information security strategy that integrates people, technology, and operations capabilities to establish variable barriers across multiple layers and missions of the organization.\n\n4. The application of multiple countermeasures in a layered or stepwise manner to achieve security objectives. The methodology involves layering heterogeneous security technologies in the common attack vectors to ensure that attacks missed by one technology are caught by another.",
  "references": [
    "NIST SP 800-161 [Superseded] from CNSSI 4009, NIST SP 800-53 Rev. 4; NISTIR 7622 from CNSSI 4009-2010, NIST SP 800-53",
    "CNSSI 4009-2015 from NIST SP 800-53 Rev. 4; NIST SP 800-172 [Superseded]; NIST SP 800-30 Rev. 1 from CNSSI 4009; NIST SP 800-39 from CNSSI 4009; NIST SP 800-53 Rev. 4 [Superseded]; NIST SP 800-172A [Superseded]; NIST SP 800-172r3",
    "NIST SP 800-53 Rev. 5",
    "NISTIR 8183 from ISA/IEC 62443, ISO/IEC 62443 1-1; NISTIR 8183A Vol. 2 from ISO/IEC 62443 1-1; NISTIR 8183A Vol. 3 from ISO/IEC 62443 1-1; NISTIR 8183 Rev. 1 from ISA-62443-1-1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/defense-in-depth/"
}