A(n) _______________________________ is a statement that def…

A(n) _______________________________ is a statement that defines how the organization is going to protect its information assets and information systems, ensure compliance with legal and regulatory requirements, and maintain an environment that supports the guiding principles.