A security policy in general will not mention to
A security policy in general will not mention to update the Policy.
In business, a security policy is a document that states in writing how a company plans to protect the company's physical and information technology assets. A security policy is often considered to be a "living document", meaning that the document is never finished, but is continuously updated as technology and employee requirements change.
Information Security Policy (ISP) is a set of rules enacted by an organization to ensure that all users or networks of the IT structure within the organization's domain abide by the prescriptions regarding the security of data stored digitally within the boundaries the organization stretches its authority.