Information security strategy integrating people, technology, and operational capabilities to establish variable barriers across multiple layers and dimensions of the organization. Adapted from: FFIEC IT Examination Handbook, Information Security. 2021. https://ithandbook.ffiec.gov/glossary.aspx