Fundamentals Of Information Systems Security -

Encryption—the final line of defense that renders data unreadable even if it is stolen. 4. The Logic of Access Control

Because the most sophisticated firewall can be bypassed by a single employee clicking a phishing link, education remains a core fundamental. 3. Layers of Defense (Defense in Depth) Fundamentals of information systems security

A user should only have the minimum level of access necessary to do their job. This limits the "blast radius" if an account is compromised. 5. The Aftermath: Incident Response Encryption—the final line of defense that renders data