A mode of termination of system functions that prevents damage
See fail secure and fail soft for comparison. to specified system resources and system entities (i.e., specified data, property, and life) when a failure occurs or is detected in the system (but the failure still might cause a security compromise).
Source(s):
CNSSI 4009-2015
from
IETF RFC 4949 Ver 2