iSACA Cybersecurity Fundamentals Certification Practice Exam

What is meant by horizontal defense in depth in a security context?

1. Breaking down defenses into smaller units

2. Implementing controls across different access points

3. Layering defenses in a single access point

4. Implementing controls at various system layers

The correct answer is: Implementing controls across different access points

Horizontal defense in depth refers to the practice of implementing security controls across multiple access points within an organization’s network, rather than concentrating defenses on a single point. This strategy aims to create a broader, more resilient security posture by covering various entry points that might be vulnerable to cyber threats. By establishing protective measures at different areas—such as network borders, endpoints, and applications—organizations can reduce the risk of a successful attack compromising the entire system. This approach effectively creates a more comprehensive security architecture, making it more difficult for attackers to penetrate and move through the network. It ensures that even if one access point is compromised, other defenses remain intact, thus safeguarding sensitive data and critical systems. This horizontal strategy complements vertical defenses, which focus on layering security measures within specific system components.