What is the main characteristic of a security-in-depth strategy?

A security-in-depth strategy is best characterized by its integration of both active and passive security controls. This layered approach enhances overall security by ensuring that if one security measure fails or is compromised, additional layers remain to provide protection.

Active security controls include measures that require continuous intervention or monitoring, such as security personnel, surveillance systems, and alarms. These controls respond to incidents and threats in real time. On the other hand, passive security controls encompass measures that act as deterrents or barriers, such as physical fences, locks, and secure building designs, which do not require active management to serve their purpose.

By combining these two types of controls, a security-in-depth strategy creates a robust defense system that addresses various types of threats and vulnerabilities, ensuring that security is not solely reliant on one method or layer. This comprehensive approach significantly increases the resilience of security measures and helps in effectively mitigating both external and internal security risks.