The  protection  afforded  to  an  automated  information system  in  order  to  attain  the  applicable  objectives.