Leigh wants to provide new users with information about her organization’s security goals and high- level practices. What do organizations typically provide to accomplish this?

Policy handbooks are used to provide information about high-level security practices and goals. Audit reports may not be broadly available in an organization, runbooks are detailed how- to guides for processes or tasks, and user awareness training focuses on security awareness rather than high-level goals and policies.