Policies, Procedures, and Guidelines

• Policy : It is a High-level document that outlines senior management’s intent on security directions

• Procedure : It is a detailed step-by-step list of tasks (SOP) that should be performed in order to achieve the desired output.

• Guideline : It is a list of recommendations/best practices and are optional to follow.