Information security policy is a set of rules, principles, and processes aimed at protecting information within an organization or company. This policy ensures the necessary technical and managerial measures for protecting information, reducing risks, ensuring the confidentiality, integrity, and availability of data