An environment in which special attention is paid (in the form of authorizations, security clearances, configuration controls, etc. ) to protect data and resources from accidental or malicious acts. 2. An environment providing sufficient assurance that applications and equipment are protected against the introduction of malicious logic during an information system (IS) life cycle. Closed security is based upon a system's developers, operators, and maintenance personnel having sufficient clearances, authorization, and configuration control.