Glossary: Policies, Standards and Risk Management

policy

Also written: policies

A high-level, mandatory statement approved by senior management of what the organization requires and why. Every policy has a purpose, scope, rules, roles, exceptions and enforcement, and approval and review.