A risk management process that identifies critical information and develops measures to prevent adversaries from exploiting it.