This category encompasses the study and practice of safeguarding information systems and data from unauthorised access, use, disclosure, disruption, modification, or destruction. It encompasses topics such as network security, malware analysis, penetration testing, incident response, and risk management.