Security policy

A security policy is the set of laws, rules, and practices that regulate how an organization manages, protects, and distributes sensitive information.