A security architect at a manufacturing company is designing protections for a critical web application. She wants to ensure that if an attacker bypasses one control, other independent controls will still protect the data. She implements a perimeter firewall, network segmentation, multi-factor authentication, endpoint protection, and data encryption at rest. Which security concept is she applying?