A continuous security process of identifying, investigating, and neutralising cyber threats targeting an organisation’s systems and data before they can cause significant damage.