In cybersecurity governance, a high-level document established by senior leadership that outlines an organization's overall strategic direction, security goals, and mandatory rules is known as a _____.

### Why this is right A policy is the formalized, mandatory statement described in the material. It applies to a specific area or task, and employees who violate it may be disciplined. ### The concept Do not confuse a policy with related documents. A standard provides mandatory rules or actions that support a policy. A procedure gives detailed steps for achieving a goal or mandate. A guideline gives general, non-mandatory recommendations. Each type serves a different role in communicating and implementing organizational expectations. ### Terms - **Policy**: A formal, mandatory statement for a particular area or task. - **Guideline**: General advice that is not compulsory. ### Remember A formal requirement for a defined area points to a policy.