Watch this video on YouTube
In the context of Information Security Governance, what is the role of a Security Policy?