Industrial assets require a defense-in-depth security approach that addresses both internal and external security threats. A defense-in-depth security architecture is based on the idea that any one point of protection may be defeated. This approach uses physical, electronic, and procedural layers of defense, and applies the appropriate controls that address different types of risks.