1) the use of people, procedures, and equipment (alone or in combination) to control access to assets or facilities; 2) the measures required for the protection of assets or facilities from espionage, theft, fraud, or sabotage by a malevolent human adversary (Garcia 298).