A security policy is a document of an organization that defines how to protect the organization against threats, e.g., computer security, and how to act when dangerous situations occur.