As discussed previously in this section, defense in depth is an important part of any security strategy and helps protect systems and data at various points in the technology stack. As the array of systems, devices, and internetworks continues to grow, defense in depth becomes an ever more important principle that addresses various disparate layers within your information infrastructure.

Select a unique case study example to use for this exercise. It can be a well$-$known organization, a publicized cyber incident victim, or even your own workplace or system. Collect some basic information and answer the following questions:

Why is defense in depth important for this system or infrastructure?

Would defense in depth practices prevent or deter any potential misuse or breach activity at this organization?

Which areas of the technology stack would be most in need of defense in depth safeguards? This is a broad question, but it may include anything from interconnected networks to internal discrete system functions. Defense in depth strategies seek to counter and mitigate any potential threat vector that can be exploited.

Which particular threat vectors would be the most probable or result in the highest impact?

Would any devices or connected components be in scope?