Computer security policy

Definition
A computer security policy refers to

"[s]enior management's directives that create a computer security program, establish its goals, and assign responsibilities. The term 'policy' is also used to refer to the specific security rules for particular systems. Policy may also refer to entirely different matters, such as the specific managerial decisions setting an organization's e-mail privacy policy or fax security policy."