A set of tools, policies, and processes designed to prevent the unauthorized disclosure or leakage of sensitive information.