It is the framework of policies, processes, and procedures for managing and protecting data throughout its lifecycle.