Proactive measures intended to reduce the probability or impact of security threats before they arise, including early warning, regulation, and mitigation strategies.