The process of securing a system by reducing its attack surface through disabling unnecessary services, applying patches, configuring firewalls, and enforcing strict access controls.