a written document that describes how a system, organization, or other entity is secured.
a written document that states how an organization plans to protect the company's information technology assets is a:
1) identify problem or need 2) research and develop solutions 3) build a prototype 4) test and evaluate solution 5) communicate results and redesign