Defense in depth is a cybersecurity control or practice. It supports this objective: layers independent preventive, detective, and corrective safeguards. The implementation should still be validated against the organization's risk, architecture, legal obligations and operating constraints, then adapted rather than copied unchanged between environments.

CIS Critical Security Controls v8: https://www.cisecurity.org/controls/v8