Defense-in-Depth: A Necessary Approach to Cloud Security

This CIS blog post explains why cloud security is challenging and promotes a defense-in-depth approach that leverages CIS Controls (including IG1–IG3 and the Cloud Companion Guide), CIS Benchmarks (Foundations and Cloud Services), and CIS Hardened Images across major cloud providers to strengthen posture. Citing a 2022 Thales report showing rising cloud breaches and failed audits, it emphasizes layered controls to prevent single points of failure, deter attackers, and create more opportunities for effective incident response.