Prevention of damage to IT systems and data stored on those systems, to ensure the data’s availability, integrity, and confidentiality.