An attribute of information that describes how data is protected from disclosure or exposure to unauthorized individuals or systems.