A network architect is designing the security framework for a new enterprise campus. Management wants to ensure that if a perimeter firewall is compromised, additional controls still protect internal resources. The architect proposes stacking multiple independent security controls at the perimeter, distribution, and access layers so that no single failure exposes critical assets. Which network security design principle does this approach represent?