Created OnFebruary 28, 2018byadmin You are here: KB Home Definitions Definitions H-I Information Security Policy < BackAggregate of directives, regulations, rules, and practices that prescribes how an organization manages, protects, and distributes information. SOURCE: SP 800-53; SP 800-37; SP 800-18; CNSSI-4009