intentions and direction on a specific subject or topic, as formally expressed by the appropriate level of management
Note 1 to entry: Topic-specific policies can formally express rules or organization standards. Note 2 to entry: Some organizations use other terms for these topic-specific policies. Note 3 to entry: The topic-specific policies referred to in this document are related to information security. EXAMPLE Topic-specific policy on access control, topic-specific policy on clear desk and clear screen.