means to preserve the availability, integrity and confidentiality of information systems and information according to affordable security practices;