Security - Document
Security policy
Written rules explaining how an organisation protects its systems and information
What's it for?
Sets clear rules for how people should protect the organisation's systems and information.
For example…
Company policy forbids storing customer data in personal email
A security policy says company laptops must use encryption, strong authentication and approved software before they can access sensitive data
Think of it like…
House rules posted on the fridge: clear enough that guests know what is allowed without asking every time