Organizational Security Policies Who can access which resources in what manner? Security policy - high-level management document that informs all.