Information Security Policy Whereas it is expedient to formulate the information security policy of the Office of the Health Promotion Fund to include guidelines, standards, and procedures. (Procedure) of information security that is clearer and more appropriate by virtue of the provisions of