Defense in depth is the idea that one layer of security is just not enough. Instead, we should employ multiple security measures against attacks to maximally reduce the likelihood of business impact in case one layer becomes compromised.