Defense in Depth

by d.strom, cissp, gsec, gsna on April 16, 2009

Can a small or medium sized business do Defense in Depth?

How about the home user?

The phrase “defense in depth” is tossed around in the Information Security field as if everyone knows what is being talked about.

Just what is Defense in Depth?

The National Security Agency has put out a short paper which discusses a strategy for defense in depth.

I certainly encourage you to take a look at that paper.

The defense in depth strategy focuses on three important elements as we work toward information assurance. These elements are:

  • People
  • Technology
  • Operations

We will soon begin looking at each of these elements as it related to Information Security and the small business or home user.

- Dan

Leave a Comment

Previous post:

Next post: