Program Policy — A program policy establishes an organization’s direction and responsibilities for a defined program. In information security, it can set objectives, authority, scope, and expectations for the overall security effort. Supporting policies and procedures address specific systems, issues, and operational requirements.

Added November 6, 2026