One popular analogy used in Infosec training is the old argument for the egg vs. the onion. The comparison is an “all or nothing” shell of the egg vs. the multiple layers of the onion. The goal is to get organizations to understand that securing information, people and data should be approached with layered security. The days of relying on a single approach like a firewall are long gone. Security professionals now must leverage multiple tools to maximize visibility and provide multiple safeguards.
