Whitepaper
Defense in Depth
What’s Missing in Layered Defense? Layered Assessments.
Defense in depth is a proven strategy for protecting systems and software from insider and external attacks. An organization usually starts with perimeter security, keeping malicious actors from accessing systems and monitoring data entering externally facing applications. Primary defenses should also include limiting and managing privileged accounts, endpoint detection and response, and identifying and protecting sensitive data from unauthorized access. More advanced defensive measures likely include log monitoring using a SIEM and security orchestration, automation, and response (SOAR).
