Glossary: Governance, Risk and Compliance

policy

Also written: policies

A short, high-level statement of what the organization wants and why, approved by the top people and rarely naming products or numbers. An example is Kettle & Crane's Information Security Policy.