### Question
How does the law define defensive measure?


### Answer
Under *6 U.S.C. § 650*, **defensive measure** is defined as:

> an action, device, procedure, signature, technique, or other measure applied to an information system or information that is stored on, processed by, or transiting an information system that detects, prevents, or mitigates a known or suspected cybersecurity threat or security vulnerability

#### Citation:
  - *6 U.S.C. § 650*
  - Heading: **CHAPTER 1-HOMELAND SECURITY ORGANIZATION > SUBCHAPTER XVIII-CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY**

