Information Security ◾ 373
12.8.4 Compartmentalize
Defending in depth seems to imply that we treat all assets as a group.
However, it is oen smarter to subdivide assets into separate compart-
ments and secure the compartments independently. e hulls of large
ships are certainly compartmentalized, so that ooding a single compart-
ment does not necessarily mean others are also breached.
Data security can similarly benet from compartmentalization. Several
companies have reported that their online servers had been successfully
attacked and that these servers stored condential credit card information
from their customers. It might have been wise for these companies to use
multiple les, systems, or servers to partition their customer cr ...