The protection of information assets from unauthorized access, use, disclosure, disruption, modification, or destruction.