Attributes of software products that bear on its ability to prevent unauthorized access, whether accidental or deliberate, to programs and data. [ISO 9126] See also functionality.
They are active and passive measures to be taken to protect facilities from sabotage, classified information and documents from espionage and personnel from destructive activities.