The process of bringing the risk threat of a computer system down to an acceptable level.
Acquisition is the first stage in the cyber lifecycle. It refers to gaining information and formulating a plan to implement it.