Information Security Policy

A formal document that defines the rules, guidelines, and procedures for managing and protecting an organization's information assets and technology resources.