Security Policy is a set of rules and practices that specify how a system or organization delivers security services to protect sensitive and critical information.