Several independent layers of security controls (perimeter, network, application, data, monitoring), so one failure isn't a breach.