Critical information is encrypted within an application accessible only to a small group of administrators, with a separate group of administrators holding the decryption keys. What Defense in Depth…

Information-Centric Defense in Depth centers security controls directly on the data rather than on the network perimeter or host. Encrypting the data and implementing separation of duties for key management ensures that even administrators with application access cannot read the data without coordination with the key-holding group, protecting the information regardless of where it resides.

Uniform Protection applies the same level of controls to all assets regardless of their sensitivity, which is the opposite of the targeted, data-focused approach described.

Protected Enclaves refers to segmenting the network into isolated zones to limit lateral movement, not to encrypting data with separated key management.

Threat Vector Analysis is a process of identifying potential attack paths and is not a Defense in Depth layer or protection model.