1const BASE_PATH = "/wp-content/themes/collective-risk/policy-library/policies/"; 2 3const policyData = [ 4 // ââ v2026 policies (February 11, 2026) ââ 5 6 { 7 id: "access-management-v2026", 8 name: "Access Management Policy", 9 category: "Identify and Access", 10 version: "v2026", 11 date: "February 11, 2026", 12 description: "Defines requirements for granting, modifying, and revoking access to organizational systems and data based on business need and least-privilege principles.", 13 pdfFile: BASE_PATH + "v2026/Access Management Policy.pdf", 14 docxFile: BASE_PATH + "v2026/Access Management Policy.docx", 15 }, 16 { 17 id: "asset-management-v2026", 18 name: "Asset Management Policy", 19 category: "Governance", 20 version: "v2026", 21 date: "February 11, 2026", 22 description: "Establishes standards for identifying, tracking, and managing organizational hardware and software assets throughout their lifecycle.", 23 pdfFile: BASE_PATH + "v2026/Asset Management Policy.pdf", 24 docxFile: BASE_PATH + "v2026/Asset Management Policy.docx", 25 }, 26 { 27 id: "cloud-service-provider-management-v2026", 28 name: "Cloud Service Provider Management Policy", 29 category: "Application", 30 version: "v2026", 31 date: "February 11, 2026", 32 description: "Governs the selection, assessment, and ongoing oversight of cloud service providers to ensure they meet organizational security and compliance requirements.", 33 pdfFile: BASE_PATH + "v2026/Cloud Service Provider Management Policy.pdf", 34 docxFile: BASE_PATH + "v2026/Cloud Service Provider Management Policy.docx", 35 }, 36 { 37 id: "configuration-management-v2026", 38 name: "Configuration Management Policy", 39 category: "Compute", 40 version: "v2026", 41 date: "February 11, 2026", 42 description: "Defines standards for establishing, documenting, and maintaining secure configuration baselines across all organizational systems.", 43 pdfFile: BASE_PATH + "v2026/Configuration Management Policy.pdf", 44 docxFile: BASE_PATH + "v2026/Configuration Management Policy.docx", 45 }, 46 { 47 id: "data-inventory-management-v2026", 48 name: "Data Inventory Management Policy", 49 category: "Identify and Access", 50 version: "v2026", 51 date: "February 11, 2026", 52 description: "Outlines requirements for cataloging, classifying, and maintaining an inventory of organizational data assets to support protection and compliance efforts.", 53 pdfFile: BASE_PATH + "v2026/Data Inventory Management Policy.pdf", 54 docxFile: BASE_PATH + "v2026/Data Inventory Management Policy.docx", 55 }, 56 { 57 id: "education-management-v2026", 58 name: "Education Management Policy", 59 category: "Governance", 60 version: "v2026", 61 date: "February 11, 2026", 62 description: "Establishes requirements for security awareness training, education programs, and ongoing workforce development to reduce human-related security risks.", 63 pdfFile: BASE_PATH + "v2026/Education Management Policy.pdf", 64 docxFile: BASE_PATH + "v2026/Education Management Policy.docx", 65 }, 66 { 67 id: "email-management-v2026", 68 name: "Email Management Policy", 69 category: "Application", 70 version: "v2026", 71 date: "February 11, 2026", 72 description: "Defines acceptable use, security controls, and protective measures for organizational email systems to prevent data loss and email-based threats.", 73 pdfFile: BASE_PATH + "v2026/Email Management Policy.pdf", 74 docxFile: BASE_PATH + "v2026/Email Management Policy.docx", 75 }, 76 { 77 id: "identity-management-v2026", 78 name: "Identity Management Policy", 79 category: "Identify and Access", 80 version: "v2026", 81 date: "February 11, 2026", 82 description: "Governs the creation, maintenance, and deactivation of digital identities and credentials used to access organizational resources.", 83 pdfFile: BASE_PATH + "v2026/Identity Management Policy.pdf", 84 docxFile: BASE_PATH + "v2026/Identity Management Policy.docx", 85 }, 86 { 87 id: "internal-network-access-management-v2026", 88 name: "Internal Network Access Management Policy", 89 category: "Network", 90 version: "v2026", 91 date: "February 11, 2026", 92 description: "Specifies controls for managing and securing access to internal network resources, including segmentation, monitoring, and access restrictions.", 93 pdfFile: BASE_PATH + "v2026/Internal Network Access Management Policy.pdf", 94 docxFile: BASE_PATH + "v2026/Internal Network Access Management Policy.docx", 95 }, 96 { 97 id: "log-management-v2026", 98 name: "Log Management Policy", 99 category: "Identify and Access", 100 version: "v2026", 101 date: "February 11, 2026", 102 description: "Defines requirements for collecting, storing, protecting, and reviewing system and security logs to support incident detection and forensic analysis.", 103 pdfFile: BASE_PATH + "v2026/Log Management Policy.pdf", 104 docxFile: BASE_PATH + "v2026/Log Management Policy.docx", 105 }, 106 { 107 id: "mobile-device-management-v2026", 108 name: "Mobile Device Management Policy", 109 category: "Compute", 110 version: "v2026", 111 date: "February 11, 2026", 112 description: "Establishes security requirements for the use, management, and protection of mobile devices accessing organizational systems and data.", 113 pdfFile: BASE_PATH + "v2026/Mobile Device Management Policy.pdf", 114 docxFile: BASE_PATH + "v2026/Mobile Device Management Policy.docx", 115 }, 116 { 117 id: "network-device-management-v2026", 118 name: "Network Device Management Policy", 119 category: "Network", 120 version: "v2026", 121 date: "February 11, 2026", 122 description: "Governs the secure configuration, management, and monitoring of network infrastru
122cture devices such as routers, switches, and firewalls.", 123 pdfFile: BASE_PATH + "v2026/Network Device Management Policy.pdf", 124 docxFile: BASE_PATH + "v2026/Network Device Management Policy.docx", 125 }, 126 { 127 id: "perimeter-network-access-management-v2026", 128 name: "Perimeter Network Access Management Policy", 129 category: "Network", 130 version: "v2026", 131 date: "February 11, 2026", 132 description: "Defines controls for securing the network perimeter, including firewall rules, DMZ architecture, and traffic filtering at organizational boundaries.", 133 pdfFile: BASE_PATH + "v2026/Perimeter Network Access Management Policy.pdf", 134 docxFile: BASE_PATH + "v2026/Perimeter Network Access Management Policy.docx", 135 }, 136 { 137 id: "physical-security-management-v2026", 138 name: "Physical Security Management Policy", 139 category: "Governance", 140 version: "v2026", 141 date: "February 11, 2026", 142 description: "Establishes requirements for protecting physical facilities, equipment, and personnel through access controls, surveillance, and environmental safeguards.", 143 pdfFile: BASE_PATH + "v2026/Physical Security Management Policy.pdf", 144 docxFile: BASE_PATH + "v2026/Physical Security Management Policy.docx", 145 }, 146 { 147 id: "privacy-management-v2026", 148 name: "Privacy Management Policy", 149 category: "Governance", 150 version: "v2026", 151 date: "February 11, 2026", 152 description: "Outlines the organization's approach to collecting, processing, storing, and disposing of personal and sensitive information in compliance with privacy regulations.", 153 pdfFile: BASE_PATH + "v2026/Privacy Management Policy.pdf", 154 docxFile: BASE_PATH + "v2026/Privacy Management Policy.docx", 155 }, 156 { 157 id: "privileged-account-management-v2026", 158 name: "Privileged Account Management Policy", 159 category: "Identify and Access", 160 version: "v2026", 161 date: "February 11, 2026", 162 description: "Defines strict controls for the provisioning, use, monitoring, and review of privileged and administrative accounts across organizational systems.", 163 pdfFile: BASE_PATH + "v2026/Privileged Account Management Policy.pdf", 164 docxFile: BASE_PATH + "v2026/Privileged Account Management Policy.docx", 165 }, 166 { 167 id: "program-management-v2026", 168 name: "Program Management Policy", 169 category: "Governance", 170 version: "v2026", 171 date: "February 11, 2026", 172 description: "Defines the overarching cybersecurity program structure, including roles, responsibilities, and governance processes for managing organizational security initiatives.", 173 pdfFile: BASE_PATH + "v2026/Program Management Policy.pdf", 174 docxFile: BASE_PATH + "v2026/Program Management Policy.docx", 175 }, 176 { 177 id: "resilience-management-v2026", 178 name: "Resilience Management Policy", 179 category: "Resilience", 180 version: "v2026", 181 date: "February 11, 2026", 182 description: "Establishes requirements for maintaining business continuity and disaster recovery capabilities to ensure organizational resilience against disruptions.", 183 pdfFile: BASE_PATH + "v2026/Resilience Management Policy.pdf", 184 docxFile: BASE_PATH + "v2026/Resilience Management Policy.docx", 185 }, 186 { 187 id: "risk-communication-management-v2026", 188 name: "Risk Communication Management Policy", 189 category: "Governance", 190 version: "v2026", 191 date: "February 11, 2026", 192 description: "Governs how cybersecurity risks are communicated to stakeholders, including reporting structures, escalation paths, and risk disclosure requirements.", 193 pdfFile: BASE_PATH + "v2026/Risk Communication Management Policy.pdf", 194 docxFile: BASE_PATH + "v2026/Risk Communication Management Policy.docx", 195 }, 196 { 197 id: "safeguard-implementation-management-v2026", 198 name: "Safeguard Implementation Management Policy", 199 category: "Governance", 200 version: "v2026", 201 date: "February 11, 2026", 202 description: "Defines processes for deploying and maintaining security safeguards and controls to mitigate identified risks across organizational systems.", 203 pdfFile: BASE_PATH + "v2026/Safeguard Implementation Management Policy.pdf", 204 docxFile: BASE_PATH + "v2026/Safeguard Implementation Management Policy.docx", 205 }, 206 { 207 id: "safeguard-selection-management-v2026", 208 name: "Safeguard Selection Management Policy", 209 category: "Governance", 210 version: "v2026", 211 date: "February 11, 2026", 212 description: "Outlines criteria and processes for selecting appropriate security controls and safeguards based on risk assessments and compliance frameworks.", 213 pdfFile: BASE_PATH + "v2026/Safeguard Selection Management Policy.pdf", 214 docxFile: BASE_PATH + "v2026/Safeguard Selection Management Policy.docx", 215 }, 216 { 217 id: "safeguard-validation-management-v2026", 218 name: "Safeguard Validation Management Policy", 219 category: "Governance", 220 version: "v2026", 221 date: "February 11, 2026", 222 description: "Establishes requirements for regularly testing, evaluating, and validating the effectiveness of implemented security safeguards and controls.", 223 pdfFile: BASE_PATH + "v2026/Safeguard Validation Management Policy.pdf", 224 docxFile: BASE_PATH + "v2026/Safeguard Validation Management Policy.docx", 225 }, 226 { 227 id: "software-development-management-v2026", 228 name: "Software Development Management Policy", 229 category: "Application", 230 version: "v2026", 231 date: "February 11, 2026", 232 description: "Defines secure software development lifecycle requirements, including coding standards, review processes, and security integration throughout development phases.", 233 pdfFile: BASE_PATH + "v2026/Software Development Management Policy.pdf", 234 docxFile: BASE_PATH + "v2026/Software Development Management Policy.docx", 235 }, 236 { 237 id: "software-development-operations-v2026", 238 name: "Software Development Operations Policy", 239 category: "Application", 240 version: "v2026", 241 date: "February 11, 2026", 242 description: "Governs the integration of security practices into DevOps processes, including CI/CD pipeline security, deployment c
242ontrols, and operational handoffs.", 243 pdfFile: BASE_PATH + "v2026/Software Development Operations Policy.pdf", 244 docxFile: BASE_PATH + "v2026/Software Development Operations Policy.docx", 245 }, 246 { 247 id: "software-development-vulnerability-management-v2026", 248 name: "Software Development Vulnerability Management Policy", 249 category: "Application", 250 version: "v2026", 251 date: "February 11, 2026", 252 description: "Outlines requirements for identifying, tracking, and remediating vulnerabilities discovered during software development, including code scanning and dependency analysis.", 253 pdfFile: BASE_PATH + "v2026/Software Development Vulnerability Management Policy.pdf", 254 docxFile: BASE_PATH + "v2026/Software Development Vulnerability Management Policy.docx", 255 }, 256 { 257 id: "software-management-v2026", 258 name: "Software Management Policy", 259 category: "Compute", 260 version: "v2026", 261 date: "February 11, 2026", 262 description: "Establishes standards for managing organizational software assets, including approved software lists, licensing compliance, and patch management requirements.", 263 pdfFile: BASE_PATH + "v2026/Software Management Policy.pdf", 264 docxFile: BASE_PATH + "v2026/Software Management Policy.docx", 265 }, 266 { 267 id: "system-protection-management-v2026", 268 name: "System Protection Management Policy", 269 category: "Compute", 270 version: "v2026", 271 date: "February 11, 2026", 272 description: "Defines requirements for protecting organizational systems through endpoint security, malware defenses, system hardening, and protective monitoring.", 273 pdfFile: BASE_PATH + "v2026/System Protection Management Policy.pdf", 274 docxFile: BASE_PATH + "v2026/System Protection Management Policy.docx", 275 }, 276 { 277 id: "third-party-management-v2026", 278 name: "Third-Party Management Policy", 279 category: "Governance", 280 version: "v2026", 281 date: "February 11, 2026", 282 description: "Governs the assessment, onboarding, and ongoing monitoring of third-party vendors and partners to manage supply chain and vendor-related security risks.", 283 pdfFile: BASE_PATH + "v2026/Third-Party Management Policy.pdf", 284 docxFile: BASE_PATH + "v2026/Third-Party Management Policy.docx", 285 }, 286 { 287 id: "vulnerability-management-v2026", 288 name: "Vulnerability Management Policy", 289 category: "Compute", 290 version: "v2026", 291 date: "February 11, 2026", 292 description: "Defines the organization's approach to identifying, assessing, prioritizing, and remediating security vulnerabilities across all systems and infrastructure.", 293 pdfFile: BASE_PATH + "v2026/Vulnerability Management Policy.pdf", 294 docxFile: BASE_PATH + "v2026/Vulnerability Management Policy.docx", 295 }, 296 297 // ââ v2025 policies (April 15, 2025) ââ 298 299 { 300 id: "access-management-v2025", 301 name: "Access Management Policy", 302 category: "Identify and Access", 303 version: "v2025", 304 date: "April 15, 2025", 305 description: "Defines requirements for granting, modifying, and revoking access to organizational systems and data based on business need and least-privilege principles.", 306 pdfFile: BASE_PATH + "v2025/Access Management Policy.pdf", 307 docxFile: BASE_PATH + "v2025/Access Management Policy.docx", 308 }, 309 { 310 id: "asset-management-v2025", 311 name: "Asset Management Policy", 312 category: "Governance", 313 version: "v2025", 314 date: "April 15, 2025", 315 description: "Establishes standards for identifying, tracking, and managing organizational hardware and software assets throughout their lifecycle.", 316 pdfFile: BASE_PATH + "v2025/Asset Management Policy.pdf", 317 docxFile: BASE_PATH + "v2025/Asset Management Policy.docx", 318 }, 319 { 320 id: "cloud-service-provider-management-v2025", 321 name: "Cloud Service Provider Management Policy", 322 category: "Application", 323 version: "v2025", 324 date: "April 15, 2025", 325 description: "Governs the selection, assessment, and ongoing oversight of cloud service providers to ensure they meet organizational security and compliance requirements.", 326 pdfFile: BASE_PATH + "v2025/Cloud Service Provider Management Policy.pdf", 327 docxFile: BASE_PATH + "v2025/Cloud Service Provider Management Policy.docx", 328 }, 329 { 330 id: "configuration-management-v2025", 331 name: "Configuration Management Policy", 332 category: "Compute", 333 version: "v2025", 334 date: "April 15, 2025", 335 description: "Defines standards for establishing, documenting, and maintaining secure configuration baselines across all organizational systems.", 336 pdfFile: BASE_PATH + "v2025/Configuration Management Policy.pdf", 337 docxFile: BASE_PATH + "v2025/Configuration Management Policy.docx", 338 }, 339 { 340 id: "data-inventory-management-v2025", 341 name: "Data Inventory Management Policy", 342 category: "Identify and Access", 343 version: "v2025", 344 date: "April 15, 2025", 345 description: "Outlines requirements for cataloging, classifying, and maintaining an inventory of organizational data assets to
345support protection and compliance efforts.", 346 pdfFile: BASE_PATH + "v2025/Data Inventory Management Policy.pdf", 347 docxFile: BASE_PATH + "v2025/Data Inventory Management Policy.docx", 348 }, 349 { 350 id: "education-management-v2025", 351 name: "Education Management Policy", 352 category: "Governance", 353 version: "v2025", 354 date: "April 15, 2025", 355 description: "Establishes requirements for security awareness training, education programs, and ongoing workforce development to reduce human-related security risks.", 356 pdfFile: BASE_PATH + "v2025/Education Management Policy.pdf", 357 docxFile: BASE_PATH + "v2025/Education Management Policy.docx", 358 }, 359 { 360 id: "email-management-v2025", 361 name: "Email Management Policy", 362 category: "Application", 363 version: "v2025", 364 date: "April 15, 2025", 365 description: "Defines acceptable use, security controls, and protective measures for organizational email systems to prevent data loss and email-based threats.", 366 pdfFile: BASE_PATH + "v2025/Email Management Policy.pdf", 367 docxFile: BASE_PATH + "v2025/Email Management Policy.docx", 368 }, 369 { 370 id: "identity-management-v2025", 371 name: "Identity Management Policy", 372 category: "Identify and Access", 373 version: "v2025", 374 date: "April 15, 2025", 375 description: "Governs the creation, maintenance, and deactivation of digital identities and credentials used to access organizational resources.", 376 pdfFile: BASE_PATH + "v2025/Identity Management Policy.pdf", 377 docxFile: BASE_PATH + "v2025/Identity Management Policy.docx", 378 }, 379 { 380 id: "internal-network-access-management-v2025", 381 name: "Internal Network Access Management Policy", 382 category: "Network", 383 version: "v2025", 384 date: "April 15, 2025", 385 description: "Specifies controls for managing and securing access to internal network resources, including segmentation, monitoring, and access restrictions.", 386 pdfFile: BASE_PATH + "v2025/Internal Network Access Management Policy.pdf", 387 docxFile: BASE_PATH + "v2025/Internal Network Access Management Policy.docx", 388 }, 389 { 390 id: "log-management-v2025", 391 name: "Log Management Policy", 392 category: "Identify and Access", 393 version: "v2025", 394 date: "April 15, 2025", 395 description: "Defines requirements for collecting, storing, protecting, and reviewing system and security logs to support incident detection and forensic analysis.", 396 pdfFile: BASE_PATH + "v2025/Log Management Policy.pdf", 397 docxFile: BASE_PATH + "v2025/Log Management Policy.docx", 398 }, 399 { 400 id: "mobile-device-management-v2025", 401 name: "Mobile Device Management Policy", 402 category: "Compute", 403 version: "v2025", 404 date: "April 15, 2025", 405 description: "Establishes security requirements for the use, management, and protection of mobile devices accessing organizational systems and data.", 406 pdfFile: BASE_PATH + "v2025/Mobile Device Management Policy.pdf", 407 docxFile: BASE_PATH + "v2025/Mobile Device Management Policy.docx", 408 }, 409 { 410 id: "network-device-management-v2025", 411 name: "Network Device Management Policy", 412 category: "Network", 413 version: "v2025", 414 date: "April 15, 2025", 415 description: "Governs the secure configuration, management, and monitoring of network infrastructure devices such as routers, switches, and firewalls.", 416 pdfFile: BASE_PATH + "v2025/Network Device Management Policy.pdf", 417 docxFile: BASE_PATH + "v2025/Network Device Management Policy.docx", 418 }, 419 { 420 id: "perimeter-network-access-management-v2025", 421 name: "Perimeter Network Access Management Policy", 422 category: "Network", 423 version: "v2025", 424 date: "April 15, 2025", 425 description: "Defines controls for securing the network perimeter, including firewall rules, DMZ architecture, and traffic filtering at organizational boundaries.", 426 pdfFile: BASE_PATH + "v2025/Perimeter Network Access Management Policy.pdf", 427 docxFile: BASE_PATH + "v2025/Perimeter Network Access Management Policy.docx", 428 }, 429 { 430 id: "physical-security-management-v2025", 431 name: "Physical Security Management Policy", 432 category: "Governance", 433 version: "v2025", 434 date: "April 15, 2025", 435 description: "Establishes requirements for protecting physical facilities, equipment, and personnel through access controls, surveillance, and environmental safeguards.", 436 pdfFile: BASE_PATH + "v2025/Physical Security Management Policy.pdf", 437 docxFile: BASE_PATH + "v2025/Physical Security Management Policy.docx", 438 }, 439 { 440 id: "privacy-management-v2025", 441 name: "Privacy Management Policy", 442 category: "Governance", 443 version: "v2025", 444 date: "April 15, 2025", 445 description: "Outlines the organization's approach to collecting, processing, storing, and disposing of personal and sensitive information in compliance with privacy regulations.", 446 pdfFile: BASE_PATH + "v2025/Privacy Management Policy.pdf", 447 docxFile: BASE_PATH + "v2025/Privacy Management Policy.docx", 448 }, 449 { 450 id: "privileged-account-management-v2025", 451 name: "Privileged Account Management Policy", 452 category: "Identify and Access", 453 version: "v2025", 454 date: "April 15, 2025", 455 description: "Defines strict controls for the provisioning, use, monitoring, and review of privileged and administrative accounts across organizational systems.", 456 pdfFile: BASE_PATH + "v2025/Privileged Account Management Policy.pdf", 457 docxFile: BASE_PATH + "v2025/Privileged Account Management Policy.docx", 458 }, 459 { 460 id: "program-management-v2025", 461 name: "Program Management Policy", 462 category: "Governance", 463 version: "v2025", 464 date: "April 15, 2025", 465 description: "Defines the overarching cybersecurity program structure, including roles, responsibilities, and governance processes for managing organizational security initiatives.", 466 pdfFile: BASE_PATH + "v2025/Program Management Policy.pdf", 467 docxFile: BASE_PATH + "v2025/Program Management Policy.docx", 468 }, 469 { 470 id: "resilience-management-v2025", 471 name: "Resilience Management Policy", 472 category: "Resilience", 473 version: "v2025", 474 date: "April 15, 2025", 475 description: "Establishes requirements for maintaining business continuity and disaster recovery capabilities to ensure organizational resilience against disruptions.", 476 pdfFile: BASE_PATH + "v2025/Resilience Management Policy.pdf", 477 docxFile: BASE_PATH + "v2025/Resilience Management Policy.docx", 478 }, 479 { 480 id: "risk-communication-management-v2025", 481 name: "Risk Communication Management Policy", 482 category: "Governance", 483 version: "v2025", 484 date: "April 15, 2025", 485 description: "Governs how cybersecurity risks are communicated to stakeholders, including reporting structures, escalation paths, and risk disclosure requirements.", 486 pdfFile: BASE_PATH + "v2025/Risk Communication Management Policy.pdf", 487 docxFile: BASE_PATH + "v2025/Risk Communication Management Policy.docx", 488 }, 489 { 490 id: "safeguard-implementation-management-v2025", 491 name: "Safeguard Implementation Management Policy", 492 category: "Governance", 493 version: "v2025", 494 date: "April 15, 2025", 495 description: "Defines processes for deploying and maintaining security safeguards and controls to mitigate identified risks across organizational systems.", 496 pdfFile: BASE_PATH + "v2025/Safeguard Implementation Management Policy.pdf", 497 docxFile: BASE_PATH + "v2025/Safeguard Implementation Management Policy.docx", 498 }, 499 { 500 id: "safeguard-selection-management-v2025", 501 name: "Safeguard Selection Management Policy", 502 category: "Governance", 503 version: "v2025", 504 date: "April 15, 2025", 505 description: "Outlines criteria and processes for selecting appropriate security controls and safeguards based on risk assessments and compliance frameworks.", 506 pdfFile: BASE_PATH + "v2025/Safeguard Selection Management Policy.pdf", 507 docxFile: BASE_PATH + "v2025/Safeguard Selection Management Policy.docx", 508 }, 509 { 510 id: "safeguard-validation-management-v2025", 511 name: "Safeguard Validation Management Policy", 512 category: "Governance", 513 version: "v2025", 514 date: "April 15, 2025", 515 description: "Establishes requirements for regularly testing, evaluating, and validating the effectiveness of implemented security safeguards and controls.", 516 pdfFile: BASE_PATH + "v2025/Safeguard Validation Management Policy.pdf", 517 docxFile: BASE_PATH + "v2025/Safeguard Validation Management Policy.docx", 518 }, 519 { 520 id: "software-development-management-v2025", 521 name: "Software Development Management Policy", 522 category: "Application", 523 version: "v2025", 524 date: "April 15, 2025", 525 description: "Defines secure software development lifecycle requirements, including coding standards, review processes, and security integration throughout development phases.", 526 pdfFile: BASE_PATH + "v2025/Software Development Management Policy.pdf", 527 docxFile: BASE_PATH + "v2025/Software Development Management Policy.docx", 528 }, 529 { 530 id: "software-development-vulnerability-management-v2025", 531 name: "Software Development Vulnerability Management Policy", 532 category: "Application", 533 version: "v2025", 534 date: "April 15, 2025", 535 description: "Outlines requirements for identifying, tracking, and remediating vulnerabilities discovered during software development, including code scanning and dependency analysis.", 536 pdfFile: BASE_PATH + "v2025/Software Development Vulnerability Management Policy.pdf", 537 docxFile: BASE_PATH + "v2025/Software Development Vulnerability Management Policy.docx", 538 }, 539 { 540 id: "software-management-v2025", 541 name: "Software Management Policy", 542 category: "Compute", 543 version: "v2025", 544 date: "April 15, 2025", 545 description: "Establishes standards for managing organizational software assets, including approved software lists, licensing compliance, and patch management requirements.", 546 pdfFile: BASE_PATH + "v2025/Software Management Policy.pdf", 547 docxFile: BASE_PATH + "v2025/Software Management Policy.docx", 548 }, 549 { 550 id: "system-protection-management-v2025", 551 name: "System Protection Management Policy", 552 category: "Compute", 553 version: "v2025", 554 date: "April 15, 2025", 555 description: "Defines requirements for protecting organizational systems through endpoint security, malware defenses, system hardening, and protective monitoring.", 556 pdfFile: BASE_PATH + "v2025/System Protection Management Policy.pdf", 557 docxFile: BASE_PATH + "v2025/System Protection Management Policy.docx", 558 }, 559 { 560 id: "third-party-management-v2025", 561 name: "Third-Party Management Policy", 562 category: "Governance", 563 version: "v2025", 564 date: "April 15, 2025", 565 description: "Governs the assessment, onboarding, and ongoing monitoring of third-party vendors and partners to manage supply chain and vendor-related security risks.", 566 pdfFile: BASE_PATH + "v2025/Third-Party Management Policy.pdf", 567 docxFile: BASE_PATH + "v2025/Third-Party Management Policy.docx", 568 }, 569 { 570 id: "vulnerability-management-v2025", 571 name: "Vulnerability Management Policy", 572 category: "Compute", 573 version: "v2025", 574 date: "April 15, 2025", 575 description: "Defines the organization's approach to identifying, assessing, prioritizing, and remediating security vulnerabilities across all systems and infrastru
575cture.", 576 pdfFile: BASE_PATH + "v2025/Vulnerability Management Policy.pdf", 577 docxFile: BASE_PATH + "v2025/Vulnerability Management Policy.docx", 578 }, 579];
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.