A design approach for minimizing the design basis for loss potential and using architectural features to provide structure for implementing engineered security features and devices.
Sources:
NIST SP 800-160v1r1