Defense in depth

Using several layers of controls of different kinds, so one failure doesn't expose everything.

Where the book teaches it