Definition: A security control that is primarily implemented by the use of technology. (adapted from ITSG-33/HTRA)