Glossary: Policies, Standards and Risk Management

information security policy

The top-level security policy, approved by senior management, that states the commitment to protecting information, sets goals and roles, and points to all the other policies. Kettle & Crane's is KC-POL-01.