s a variety ofongoing measures taken to reduce thelikelihood and severity of accidental and intentional alteration, destruction, misappropriation,misuse, misconfiguration, unauthorizeddistribution, and unavailability of an organization’s logical and physical assets, as the result ofaction or inaction by insiders and knownoutsiders, such as business partners.”