Any action, device, procedure, technique, or other measure that reduces the vulnerability of or threat to a system.