The practice of protecting computer systems, networks, programs, and data from digital attacks, unauthorized access, theft, damage, disruption, or misdirection, ensuring the confidentiality, integrity, and availability of information assets and the resilience of the underlying infrastructure.