A list of written rules for procedures. Includes: AUP Security protocols Consequences of non-compliance