5.9 Defence in Depth

Principle employed to detect, deter, and delay the event of security incident.

Physical Security

• Physical hardware protection
• Data centre facility security

Identity and Access Management

• Authorized user access control

Perimeter Security

• Tools: Firewalls and DDoS protection

Network Security

• Network safeguarding - Segmentations.

Compute Security

• Protection of VMs, containers, serverless computing instances

Application Security

• Application focused security

Data Security

• Data protection - encryption at rest and in transit

Benefits

• Robust security
• Risk Mitigation
• Holistic Security Approach