A type of Activity that specifies a safeguard or countermeasure prescribed for a Resource Performer. It is intended to protect the confidentiality, integrity, and availability of the Resource’s information and to meet a set of defined security requirements.