Defined term
Information Security Policy
Information Security Policy: Aggregate of directives, regulations, and rules that prescribe how an organization manages, protects, and distributes information.
Verified
🏆 High Consensus
Legal & Policy
Definition
Aggregate of directives, regulations, and rules that prescribe how an organization manages, protects, and distributes information.
Alternative Definitions
- Definition 2
An aggregate of directives, regulations, rules, and practices that prescribe how an organization manages, protects, and distributes information.
- Definition 3
Aggregate of directives, regulations, rules, and practices that prescribes how an organization manages, protects, and distributes information. (SP 800-53; SP 800-37; SP 800-18; CNSSI-4009) (NISTIR)
Sources
1
Committee on National Security Systems Glossary CNSSI 4009-2015
View Source2
NICCS Glossary
View Source3
The Cyber Glossary
View Source