Permission Set and Permission Set Group are very important for Salesforce Application Security. Profile is common security implementation and then we should create multiple permission sets and based on requirement we should add permission sets to users.