A set of practices and technologies designed to protect sensitive information from unauthorised access, use, disclosure, disruption, modification, or destruction. It encompasses measures to ensure the confidentiality, integrity, and availability of data, safeguarding both digital and non-digital information across an organisation’s infrastructure