A policy is a document that outlines specific requirements and rules that must be met. These mandatory and enforceable directives are often supported by Standards, Procedures and architecture documents that provide more detail on implementation and compliance.