Defense in depth

Defense in depth is a security strategy that layers multiple, different types of protection (people, process, and technology) rather than relying on any single control to stop every threat. The idea is that if one layer fails or is bypassed, another layer is still positioned to catch the problem, which matters especially in OT environments where a single point of failure can have physical consequences.