A high-level document describing the principles, approach and major objectives of the organization regarding security.