The IT Law Wiki
No edit summary
No edit summary
Line 7: Line 7:
 
{{Quote|[t]he principles and values that guide the performance of a duty. A policy is not a statement of what must be done in a particular situation. Rather, it is a statement of guiding principles that should be followed in activities that are directed toward the attainment of goals.<ref>[[U.S. Department of Justice]], Minimum Criminal Intelligence Training Standards for Law Enforcement and Other Criminal Justice Agencies in the United States 43 (Ver. 2) (Oct. 2007) ([http://www.iir.com/Information_Sharing/global/resource/products/minimum_criminal_intel_training_standards.pdf full-text]).</ref>}}
 
{{Quote|[t]he principles and values that guide the performance of a duty. A policy is not a statement of what must be done in a particular situation. Rather, it is a statement of guiding principles that should be followed in activities that are directed toward the attainment of goals.<ref>[[U.S. Department of Justice]], Minimum Criminal Intelligence Training Standards for Law Enforcement and Other Criminal Justice Agencies in the United States 43 (Ver. 2) (Oct. 2007) ([http://www.iir.com/Information_Sharing/global/resource/products/minimum_criminal_intel_training_standards.pdf full-text]).</ref>}}
   
{{Quote|a high level, strategic statement, authorized by the executive management that dictates what type of position the organization has taken on specific issues.<ref>Newfoundland-Labrador, [[Office of the Chief Information Officer]], Information Management and Information Protection Glossary of Terms ([http://www.ocio.gov.nl.ca/ocio/im/glossary.html#External_Party full-text]).</ref>}}
+
{{Quote|a high level, strategic statement, authorized by the executive management that dictates what type of position the organization has taken on specific issues.<ref>Newfoundland-Labrador, [[Office of the Chief Information Officer]], Information Management and Information Protection Glossary of Terms ([http://www.ocio.gov.nl.ca/ocio/im/glossary.html#Policy full-text]).</ref>}}
   
 
== References ==
 
== References ==

Revision as of 03:57, 23 September 2012

Definition

A policy is

a formal document describing roles, responsibilities, standards, and enforcement mechanisms with regard to a particular issue.[1]
[t]he principles and values that guide the performance of a duty. A policy is not a statement of what must be done in a particular situation. Rather, it is a statement of guiding principles that should be followed in activities that are directed toward the attainment of goals.[2]
a high level, strategic statement, authorized by the executive management that dictates what type of position the organization has taken on specific issues.[3]

References

  1. Information Security Guide 2 - Glossary.
  2. U.S. Department of Justice, Minimum Criminal Intelligence Training Standards for Law Enforcement and Other Criminal Justice Agencies in the United States 43 (Ver. 2) (Oct. 2007) (full-text).
  3. Newfoundland-Labrador, Office of the Chief Information Officer, Information Management and Information Protection Glossary of Terms (full-text).