Protective measures and controls prescribed to meet the security requirements specified for an information system (IS. ) Safeguards may include security features, management constraints, personnel security, and security of physical structures, areas, and devices.