A company's information security policy states that all employees must be trained on security awareness. The IT department creates a document titled 'New Hire Security Onboarding' that lists the exact, ordered steps a manager follows to enroll a new employee in the training platform, assign the correct course, and record completion. Which governance element does this new document represent?