A policy is a set of principles, guidelines, or rules established by an organization to govern its operations, decision-making processes, and behavior of individuals within the organization. It also underlines the procedures for maintaining compliance and security. It describes roles and basic practices for putting particular security and compliance controls into place and keeping them up to date. Particular procedure details are typically provided by an organization in its procedure documentation.
