Description: The concept of deploying multiple layers of security controls and technologies throughout IT environments has historically been viewed as the correct strategy in a defensive cyber warfare posture. This session asks the question…is that enough? Or do we as security practitioners need to do more? During the session, we will explore: -the current dynamics of the marketplace -the limitations and challenges of a layered security approach -how an in-depth defensive strategy can create a sense of over-confidence that could pave the way for cyber-criminals Expected Outcome: The attendees should do some self-reflection and ask themselves if maybe they are overly confident that they are secure — that the strategies they've deployed are in fact enough. Intended Audience: Executives, managers, supervisors, and anyone who has a say in what their cyber-security strategy and architecture should look like.