Defense in depth is a cybersecurity control or practice. It supports this objective: layers independent preventive, detective, and corrective safeguards. In practice, document the business and security objective, the system boundary, the owner and the evidence that will show the control is operating as intended.

CIS Critical Security Controls v8: https://www.cisecurity.org/controls/v8