A financial services company is designing its cloud security posture. The security architect wants to ensure that if one control fails—such as a misconfigured firewall rule—additional independent safeguards (such as IAM restrictions, encryption, and monitoring) still protect sensitive customer data. Which security concept best describes this approach?