Which Defense-in-Depth principle starts with an awareness of the value of each section of information within an organization?

Information-centric defense places the data itself at the center of the security model, starting with an assessment of what information exists and how valuable or sensitive it is to the organization. This value-driven classification then determines which controls, access policies, and layered defenses are applied to protect that specific information wherever it resides or travels.

Uniform information protection applies the same level of protection to all information regardless of value, which is the opposite of starting with an awareness of each section's individual value.

General information protection is not a recognized Defense-in-Depth principle and does not describe a methodology anchored in per-asset value assessment.

Perimeter layering focuses on placing successive defensive barriers around the network boundary, not on evaluating and prioritizing protection based on the value of specific information assets.