A retailer's customer-facing web application currently relies solely on a perimeter firewall for protection. After a security review, the team adds input validation on the web server, encrypts the database, enforces role-based access on the application, and deploys endpoint monitoring on the backend servers. Which security concept is the team primarily applying by layering these independent safeguards?