Security theater implements visible security measures that provide the appearance of security without meaningful risk reduction — purely for compliance or public reassurance.
Examples: removing shoes at airports, password complexity rules that create predictable patterns (Password1!), annual security training with zero behavior change. Security theater wastes resources and creates false confidence. Measure security outcomes, not activity.