"security in depth". This is the kind of problem that can't be solved via specific technology choices, or technical standards.

Instead, it's a matter of understanding that most attacks involve several pivot points; and that these pivots are possible because we treat internal networks as if they are "safe spaces" where we can let our guard down.