Security, Compliance & Identity Concepts

Defense in depth layers controls so that if one fails, others still protect the asset: physical, identity & access, perimeter, network, compute, application, and data layers. The CIA triad — confidentiality, integrity, availability — frames the goals.

Zero Trust assumes breach and replaces implicit trust with continuous verification. Its guiding principles are: verify explicitly, use least-privilege access (just-in-time, just-enough-access), and assume breach (segment, encrypt, and monitor everything). Zero Trust spans six pillars: identities, devices, applications, data, infrastructure, and networks.