Defense in depth

Definition

Layering independent controls so that no single failure exposes the system, rather than relying on one strong perimeter.

In OT it usually means segmentation, controlled remote access, hardened devices, monitoring, tested backups, and a practiced manual operating procedure, in that order of practical value.

Definition

See also