This Information Security Policy is an overarching document which sets the strategic direction for the management of information security within your organisation. It describes a framework of supporting policies and standards which, when taken together, lay the foundations for achieving risk managed information security. It is a mandatory document required for those seeking ISO 27001 certification.