All measures or actions undertaken in order to prevent an act of malicious intent against an information system or operational process, via the application of an appropriate security plan.