security policy

The Security Policy forms Chapter 1 of the British Standard BS 7799 for security management. This chapter describes the guidelines for the management and support of IT security.

In addition, RFC 2196 deals with the definition of the Security Policy.

In general, the security policy contains the guidelines and regulations that must be followed by those who have access to data assets, systems, and resources. It specifies the rules and procedures by which data transfer, processing, and storage will occur.

The security policy takes into account personnel, technical, organizational and legal influencing factors.