The process of detecting and responding to threats with countermeasures that reduce or eliminate the consequences of threats and mitigate the probability of errors or undesired states.