security policy

A set of rules that establish the acceptable use of an organization’s AV and IT systems based on the risk that each system faces and the measures taken to address those risks.