Protection profile or security posture: The entire set of controls and safeguards,
including policy, education, training and awareness, and technology, that the organization implements (or fails to implement) to protect the asset. The terms are
sometimes used interchangeably with the term security program, although the security
program often comprises managerial aspects of security, including planning, personnel,
and subordinate programs.