A security team establishes controls, including permission settings that will be used to create multiple security points that a threat actor must get through to breach their organization. Which OWASP principle does this scenario describe?

$1$ point

Defense in depth

Separation of duties

Principle of least privilege

Keep security simple