A security architecture allocates controls so that a failure of any one layer is covered by another, and so that similar protections come from diverse sources. Which two concepts does SP 800-39 name for this? Choose two.

Question

Answer 1

Show the answer

Answer: B. Defence in depth
A. Defence in breadth

SP 800-39 states that the allocation of security controls is consistent with the information security architecture and with concepts such as defence in depth and defence in breadth.

Source: NIST SP 800-39 (NIST) — Sec. 2.4 Tier Two — Mission/Business Process View