a document which provides guidelines to users on the processing, storage and transmission of sensitive information
