A security architect is reviewing a new deployment. An attacker who phished a user's credentials was still unable to move laterally because network segmentation blocked traffic to critical servers, and endpoint detection quarantined the malware that was dropped. The architect wants to describe the security principle that allowed multiple independent controls to compensate when the first control (user awareness) failed. Which principle best describes this design?