Defense In Depth
Defense in Depth is an approach to cybersecurity in which a series of defensive mechanisms are layered to protect valuable data and information. If one mechanism fails, another steps up immediately to thwart an attack. This multi-layered approach with intentional redundancies increases the security of a system as a whole and addresses many different attack vectors.
Defense in Depth is commonly referred to as the “Castle Approach” because it mirrors the layered defenses of a medieval castle. Before you can infiltrate a castle, you are faced with the moat, ramparts, drawbridge, towers, battlements, and castle guards/soldiers.
Unfortunately, there is no single method that can successfully protect against every single type of attack. This is where a defense in depth architecture comes into play.
The digital world has revolutionized how we live, work and play. However, it is in this digital world that we are constantly open to attack, and because there are so many potential attackers, we need to ensure we have the right security in place to prevent systems and networks being compromised.
HOW DEFENSE IN DEPTH WORKS
A layered approach to security can be applied to all levels of IT systems. From the lone laptop accessing the internet from the coffee shop to the fifty thousand user enterprise WAN, Defense in Depth can significantly improve your security profile.
No organization can ever be fully protected by a single layer of security. Where one door may be closed, others will be left wide open, and hackers will find these vulnerabilities very quickly. However, when you use a series of different defenses together, such as firewalls, malware scanners, detection systems, data encryption and integrity auditing solutions, you effectively close the gaps that are created by relying on a singular security solution.
Intent Solutions Group’s Security services “Grizzly Shield” can help you determine the strength of your defenses through our Pinpoint Security maturity assessment services and Security Penetration testing services.
ISG Grizzly Shield Security Services
We take an easy three step approach to helping organizations Secure their AWS environment:
Pinpoint – Understand the level of maturity your security program has achieved and the possible gaps that may be present.
Jump Start – Develop Project plan/Roadmap for initiatives required to bring your Organization to the point where 24 X 7 monitoring can be leveraged, and data consumed by an MSP or internal staff or a combination of the two.
Monitoring, Training, and Ongoing Management – 24 X 7 monitoring and alerting based on defined SLAs.
