A manufacturing company's leadership issues a brief, high-level document declaring that 'all information systems must protect the organization's data and support business continuity.' A security analyst is later assigned to translate this into a mandatory requirement that every company laptop must use AES-256 full-disk encryption. Within the governance hierarchy, what type of document is the analyst creating?