protection

{
  "id": "MLC-T-CYB-003332",
  "term": "protection",
  "field": "Cybersecurity",
  "definition": "In the context of systems security engineering, a control objective that applies across all types of asset types and the corresponding consequences of loss. A system protection capability is a system control objective and a system design problem. The solution to the problem is optimized through a balanced proactive strategy and a reactive strategy that is not limited to prevention. The strategy also encompasses avoiding asset loss and consequences; detecting asset loss and consequences; minimizing (i.e., limiting, containing, restricting) asset loss and consequences; responding to asset loss and consequences; recovering from asset loss and consequences; and forecasting or predicting asset loss and consequences.",
  "references": [
    "NIST SP 800-160 Vol. 2 [Superseded] from NIST SP 800-160 Vol. 1; NIST SP 800-160 Vol. 2 Rev. 1 from NIST SP 800-160 Vol. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/protection/"
}