Learn in the textbookSecurity Policy and Management Activities
DefinitionThe information security basic policy (情報セキュリティ方針) is the top document of the policy, in which top management sets out the organization's stance on information security and the direction it aims for.
ExplanationIn Japanese it is also called 情報セキュリティ基本方針, and under an ISMS (a system for managing information security continuously as an organization) it is established by top management. It is written to fit the company's own business and the information it handles, so copying another company's wording will not do.
AnalogyIt is like a school motto: it declares what the school values but says nothing about the timetable or the cleaning rota.
Memory hookThe 針 in 方針 is a compass needle. It points the way to go but does not tell you how to steer.