information security policy

The policy that governs an organization’s
approach to information security
management.