Security posture refers to an organisation's overall capability to protect its information assets and respond to cyber threats.