Controls put in-place, be they technological, procedural, or otherwise, designed to protect the vulnerability, confidentiality, and availability of organisational data and systems.

Controls put in-place, be they technological, procedural, or otherwise, designed to protect the vulnerability, confidentiality, and availability of organisational data and systems.