# Defense in Depth

Record: `arch:defense-in-depth`
Kind: principle
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: mandatory
Scope: system, infrastructure, application
Canonical: https://banes-lab.com/ontology#arch-defense-in-depth

## Repair

- Refactored by: Add Layered Controls
- Detected by: missing secondary control
- Violated by: relying on only one security layer
- Measured by: control depth
- Enforced by: threat model review

## requires

- [Layered Controls](https://banes-lab.com/records/lex/layered-controls.md)

## reinforces

- [Security by Design](https://banes-lab.com/records/arch/security-by-design.md)

## enables

- [Compromise Containment](https://banes-lab.com/records/lex/compromise-containment.md)

## conflicts-with

- [Single Control Reliance](https://banes-lab.com/records/lex/single-control-reliance.md)

## tensions-with

- [Complexity](https://banes-lab.com/records/lex/complexity.md)

## tensions

- [Defense in Depth Complexity](https://banes-lab.com/records/tension/complexity-defense-in-depth.md)

## referenced-by

- [Security by Design](https://banes-lab.com/records/arch/security-by-design.md)
- [CSRF Protection](https://banes-lab.com/records/arch/csrf-protection.md)