Technological and personnel measures taken to secure sensitive data from unathorized users or cybercriminals.