Written information security program

A written information security program refers to written policies and procedures that provide administrative, physical, and technological safeguards to protect personal information.