Organizational program that combines people, technology and processes to protect the confidentiality, integrity and availability of infrastructure and the data contained/used therein.