What is Defense in Depth (DiD)?
In simple terms, DiD is a cybersecurity approach in which multiple defensive methods are layered to protect an organization. Since no individual security measure is guaranteed to endure every attack, combining several layers of security is more effective. This layering approach was first conceived by the National Security Agency (NSA) and is inspired by a military tactic of the same name. But in IT, the approach is intended to prevent an incident and not delay it as in the military.
7 Essential Elements of DiD:
1. Firewalls
A firewall is a security system comprising hardware or software that can protect your network by filtering out unnecessary traffic and blocking unauthorized access to your data. Other than blocking unwanted traffic, firewalls can also prevent malicious software from infecting your network. Firewalls can provide various levels of protection, so you must select the level of protection your business needs.
2. Intrusion Prevention and Detection System
An Intrusion Prevention and Detection System monitors network traffic, evaluates it and provides resolution whenever malicious behavior is detected. It scans the network to see if anything is out of place. If a threatening activity is detected, it will alert the stakeholders and block attacks.
3. Endpoint Detection and Response (EDR)
Endpoint Detection and Response (EDR) solutions operate by constantly monitoring endpoints to find suspicious or malicious behavior in real-time. It is effective against internal and external attacks and is powered by innovative technologies such as machine learning.
4. Network Segmentation
Once you divide your business’ network into smaller units, you can monitor data traffic between segments and safeguard segments from one another. Additionally, by automating the process, you can restrict unauthorized entities from accessing vital information.
5. The Principle of Least Privilege (POLP)
The principle of least privilege (PoLP) is a cybersecurity concept in which a user is only granted the minimum levels of access/permissions essential to perform their task. PoLP is considered an information security best practice to protect privileged access to business-sensitive data and assets.
6. Strong Passwords
Poor password hygiene, including the use of default passwords like “1234” or “admin” can put your business at risk. Equally risky is the habit of using the same passwords for multiple accounts. Therefore, it is essential to have strong passwords and an added layer of protection by using practices such as multifactor authentication (MFA).
7. Patch Management
Security gaps left unattended due to poor patch management can make your business vulnerable to cyberattacks. As soon as a new patch gets delivered, you must deploy it without delay. Failing to do so could provide a freeway for hackers to exploit.
Download the full complimentary eBook to learn the next steps to implementing or updating a DiD security strategy for your business.
