A cybersecurity policy defines the rules and guidelines employees must follow to protect systems, data and processes within an organization.