security policies - Guidelines that define organizational security measures to protect assets, data, and users from threats and vulnerabilities.