Information security policy

1. Purpose

This policy sets out how Acme Demo handles information security policy. It applies to everyone who works for Acme Demo, including contractors.

2. Responsibilities

The policy owner keeps it current and reviews it at least once a year. Managers make sure their teams follow it.

3. Exceptions

Exceptions are approved in writing by the policy owner, recorded, and reviewed when the policy is.

4. Version

This is version 3.