# Compromise Containment

> The ability to keep a breach confined to one layer or segment so it cannot spread system-wide.

Record: `lexicon:compromise-containment`
Kind: capability
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-compromise-containment

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Coarse-Grained Permission Management](https://banes-lab.com/records/lexicon/coarse-grained-permission-management.md) and before [Confidentiality](https://banes-lab.com/records/lexicon/confidentiality.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## Enabled by

- [Defense in Depth](https://banes-lab.com/records/architecture/defense-in-depth.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)