A formalized set of policies and procedures designed to protect electronic information from unauthorized access or theft.