The infоrmаtiоn security prоgrаm chаrter is the capstone document for the information security program. This required document establishes the information security program and its framework. Which of the following components is not defined by this high-level policy?