Information Security Policy.

This policy covers the information assets related to the institution and the information security and business processes used to protect these assets.