02/05/2026
The Cyber Journal: Layers in Security Architecture
Cybersecurity is not a single tool or product. It is a layered system designed to reduce risk at every point of entry and activity.
Two of the most important layers in security architecture are Access Control and Intrusion Detection/Prevention Systems (IDS/IPS).
1. Access Control: Who gets in and what they can do
Access control is the first line of defence. It determines who is allowed into a system and what level of access they are granted.
Key ideas include:
* Authentication: Verifying identity (passwords, biometrics, MFA)
* Authorization: Defining permissions (what a user can access or modify)
* Principle of least privilege: Users only get the minimum access needed to perform their tasks
Without strong access control, even the best security systems can be bypassed through weak credentials or unnecessary privileges.
2. IDS and IPS: Detecting and stopping threats
Once access is granted, the next challenge is monitoring activity and responding to suspicious behavior.
* Intrusion Detection System (IDS): Monitors network or system activity and raises alerts when suspicious patterns are detected.
* Intrusion Prevention System (IPS): Goes a step further by actively blocking or stopping detected threats in real time.
Think of IDS as a security camera and IPS as a security guard who can intervene immediately.
Why this matters?
A strong security architecture is layered:
* Access control limits entry
* IDS detects unusual behavior
* IPS prevents attacks from escalating
No single layer is enough on its own. Security works best when these systems operate together, continuously monitoring and controlling access and activity.
Cybersecurity is less about stopping every attack and more about building systems that detect, delay, and reduce impact when attacks happen.
