Policy and strategy (SCTY) (Level Five) Contributes to development of information security policy, standards and guidelines.