(ISC)2 Certified in Cybersecurity Practice Exam

Which security strategy is represented by the presence of guards, surveillance cameras, and safes around sensitive data?

1. Two-person integrity

2. Segregation of duties

3. Defense in depth

4. Penetration testing

The correct answer is: Defense in depth

The presence of guards, surveillance cameras, and safes around sensitive data exemplifies the concept of defense in depth. This security strategy involves layering multiple protective measures to safeguard information and systems. The idea is that if one layer fails, additional layers will still provide protection. In this case, physical security controls, such as guards and surveillance cameras, act as the first layer. They deter unauthorized access and monitor for suspicious activities. Safes represent another layer, providing a physical barrier to protect sensitive data from theft or damage. Together, these multiple layers enhance overall security, making it more challenging for potential threats to succeed. This strategy is particularly effective in complex environments where sensitive data must be kept secure from various types of threats, both physical and digital. By implementing defense in depth, organizations can create a comprehensive security posture that addresses vulnerabilities from multiple angles.