thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Security Policy

High-level management statement of intent, direction, and requirements for protecting information assets.

Definition

Policies are approved by senior management, mandatory, technology-neutral, and change infrequently. They are supported by standards, procedures, baselines, and guidelines. Policy types include organizational (program) policy, issue-specific policies, and system-specific policies.

Example

An information security policy states that all sensitive data must be encrypted in transit and at rest.

Exam tip

Policies say what and why; procedures say how.

Related terms