Information Security Policy

Aggregate of directives, regulations, rules, and practices that prescribes how an organization manages, protects, and distributes information.
SOURCE: SP 800-53; SP 800-37; SP 800-18; CNSSI-4009