What does integrated controls across domains mean in defense-in-depth?

What does integrated controls across domains mean in defense-in-depth?

• A. Controls are coordinated across digital and physical assets
• B. Controls operate only in IT, not physical security
• C. Only surveillance systems are used
• D. Security relies solely on fences

Answer: (A)

Integrated controls across domains means coordinating security measures so they span both digital and physical assets, working together as one layered defense. In defense-in-depth, you don’t rely on a single control or domain; instead, controls in IT, operations technology, facilities, and personnel security are linked so they reinforce each other. For example, physical access controls like badge readers and turnstiles feed into IT authentication and event logging, so only authorized people can enter sensitive areas and every entry is monitored. Surveillance, identity management, and network monitoring align to detect anomalies across the site and respond quickly. Similarly, protecting critical systems involves both cyber safeguards (like network segmentation and access controls) and physical protections (like secure rooms and tamper-evident seals). This cross-domain coordination reduces risk because a gap in one area can be covered by another. The other options miss this integrated, multi-domain approach: focusing only on IT excludes physical security; relying only on surveillance or only on fences ignores the need for multiple, interconnected layers across different domains.

Integrated controls across domains means coordinating security measures so they span both digital and physical assets, working together as one layered defense. In defense-in-depth, you don’t rely on a single control or domain; instead, controls in IT, operations technology, facilities, and personnel security are linked so they reinforce each other. For example, physical access controls like badge readers and turnstiles feed into IT authentication and event logging, so only authorized people can enter sensitive areas and every entry is monitored. Surveillance, identity management, and network monitoring align to detect anomalies across the site and respond quickly. Similarly, protecting critical systems involves both cyber safeguards (like network segmentation and access controls) and physical protections (like secure rooms and tamper-evident seals). This cross-domain coordination reduces risk because a gap in one area can be covered by another.

The other options miss this integrated, multi-domain approach: focusing only on IT excludes physical security; relying only on surveillance or only on fences ignores the need for multiple, interconnected layers across different domains.