A coordinated collection of capabilities authorized by the organization and used to deter, detect, and mitigate the unauthorized disclosure of information.
Sources:
NIST SP 800-53 Rev. 5
from
CNSSI 4009-2022 - Adapted