← Security+ glossary

Policy

The most abstract document at the top of the hierarchy that expresses the intent and rules of high-level management but does not describe technical details. A policy on its own is not enough for implementation because it needs standards, procedures and guidelines that translate it into concrete requirements and steps.

All Security+ guides →