Relationship between policies, procedures, standards, and guidelines: A hierarchy of rules that govern an organization’s operations. A policy is a high-level plan that outlines organizational goals. Procedures are detailed steps that describe how to accomplish these goals. Standards are established requirements that ensure procedures are performed consistently and correctly. Lastly, guidelines are recommendations that provide a framework for decision-making within the policy and procedural constraints.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D1: Information Security governance | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D1: Security Concepts and Practices
« Back to Glossary Index