What is SECURITY POLICY The set of rules that define who is authorised to access what documents and under which conditions and criteria the authorization is given.