defence in depth (non-military)

{{Short description|Way to guarantee safety by means of multiple and redundant layers of protection}}

{{Multiple issues|

{{Inadequate lead|date=October 2016}}

{{Unfocused|date=October 2016|reason=what is the article about? Is it a collection or list of subject areas that use this term, or a broad concept page?}}

}}

A defence in depth uses multi-layered protections, similar to redundant protections, to create a reliable system despite any one layer's unreliability.

Examples

The term defence in depth is now used in many non-military contexts.

=Fire prevention=

A defence in depth strategy to fire prevention does not focus all the resources only on the prevention of a fire; instead, it also requires the deployment of fire alarms, extinguishers, evacuation plans, mobile rescue and fire-fighting equipment and even nationwide plans for deploying massive resources to a major blaze.{{citation needed|date=April 2012}}

Defense-in-depth is incorporated into fire protection regulations for nuclear power plants. It requires preventing fires, detecting and extinguishing fires that do occur, and ensuring the capability to safely shutdown.[https://www.nrc.gov/reading-rm/doc-collections/cfr/part050/part050-appr.html NRC: 10 CFR Appendix R to Part 50—Fire Protection Program for Nuclear Power Facilities Operating Prior to January 1, 1979]

=Engineering=

Defence in depth may mean engineering which emphasizes redundancy – a system that keeps working when a component fails – over attempts to design components that will not fail in the first place. For example, an aircraft with four engines will be less likely to suffer total engine failure than a single-engined aircraft no matter how much effort goes into making the single engine reliable. Charles Perrow, author of Normal accidents, wrote that sometimes redundancies backfire and produce less, not more reliability. This may happen in three ways: First, redundant safety devices result in a more complex system, more prone to errors and accidents. Second, redundancy may lead to shirking of responsibility among workers. Third, redundancy may lead to increased production pressures, resulting in a system that operates at higher speeds, but less safely.{{cite web |url=http://iis-db.stanford.edu/pubs/20276/sagan_oe_dec03.pdf |archiveurl=https://web.archive.org/web/20040714202943/http://iis-db.stanford.edu/pubs/20276/sagan_oe_dec03.pdf |archivedate=2004-07-14 |title=Learning from Normal Accidents |author=Scott D. Sagan |date=March 2004 |work=Organization & Environment |url-status=dead }}

==Nuclear==

{{Main|Defense in depth (nuclear engineering)}}

In nuclear engineering and nuclear safety, all safety activities, whether organizational, behavioural or equipment related, are subject to layers of overlapping provisions, so that if

a failure should occur it would be compensated for or corrected without causing harm to individuals or the public at large. Defence in depth consists in a hierarchical deployment of different levels of equipment and procedures in order to maintain the effectiveness of physical barriers placed between radioactive materials and workers, the public or the environment, in normal operation, anticipated operational occurrences and, for some barriers, in accidents at the plant. Defence in depth is implemented through design and operation to provide a graded protection against a wide variety of transients, incidents and accidents, including equipment failures and human errors within the plant and events initiated outside the plan.{{cite book |url=http://www-pub.iaea.org/MTCD/publications/PDF/Pub1013e_web.pdf |title=Defence in depth in nuclear safety (INSAG-10) |author=International Nuclear Energy Agency |year=1996 |isbn=92-0-103295-1}}

= Existential risk mitigation =

{{main|Global catastrophic risk#Proposed mitigation}}

Defense in depth is a useful framework for categorizing existential risk mitigation measures into three layers of defense:{{Cite journal|last1=Cotton-Barratt|first1=Owen|last2=Daniel|first2=Max|last3=Sandberg|first3=Anders|date=2020|title=Defence in Depth Against Human Extinction: Prevention, Response, Resilience, and Why They All Matter|journal=Global Policy|language=en|volume=11|issue=3|pages=271–282|doi=10.1111/1758-5899.12786|issn=1758-5899|pmc=7228299|pmid=32427180}}

  1. Prevention: Reducing the probability of a catastrophe occurring in the first place. Example: Measures to prevent outbreaks of new highly-infectious diseases.
  2. Response: Preventing the scaling of a catastrophe to the global level. Example: Measures to prevent escalation of a small-scale nuclear exchange into an all-out nuclear war.
  3. Resilience: Increasing humanity's resilience (against extinction) when faced with global catastrophes. Example: Measures to increase food security during a nuclear winter.

Human extinction is most likely when all three defenses are weak, that is, "by risks we are unlikely to prevent, unlikely to successfully respond to, and unlikely to be resilient against".

=Information security=

{{main|Defense in depth (computing)}}

Likewise, in information security / Information Assurance defence in depth represents the use of multiple computer security techniques to help mitigate the risk of one component of the defence being compromised or circumvented. An example could be anti-virus software installed on individual workstations when there is already virus protection on the firewalls and servers within the same environment. Different security products from multiple vendors may be deployed to defend different potential vectors within the network, helping prevent a shortfall in any one defence leading to a wider failure; also known as a "layered approach".{{citation needed|date=April 2012}}

See also

References