Cyber resilience - Defence-in-depth principles

CHAPTER 6: LAYERS OF DEFENCE IN DEPTH

In very broad terms, there are three key layers to defence in depth and, in turn, becoming cyber resilient:

1. Prevention

Trying to prevent cyber incidents from occurring at all, or at least mitigate their impact if they do occur.

2. Detection

Knowing when your preventive measures have failed.

3. Response

Following up on detected incidents.

These can be split up further – such as into the common five-phase approach of identify, protect, detect, respond and recover – but these three are essentially a bare minimum. You can also stick with these three but divide each up into multiple layers of defence.

The following sections discuss prevention, detection and response in more detail. We will also look at a fourth ...