Discipline and set of practices to protect computer systems, networks, data, and digital infrastructure from threats, attacks, and unauthorized access. Includes perimeter and application defense, vulnerability management, security audit, incident response, regulatory compliance, threat intelligence, training, and business continuity in enterprise, cloud, and hybrid environments.