Aprocedureprovides step-by-step instructions on how to complete a specific security task, ensuring consistency and accuracy. Unlike policies, which define high-level security expectations,procedures are detailed and operational. For example, apassword reset procedurewould outline the exact steps IT support must follow when assisting users.
* Policy: Defines security objectives and rules (e.g., "All passwords must be complex").
* Standard: Specifies required technologies or configurations.
* Guideline: Provides recommendations but is not mandatory.
* Procedure: Gives exact instructions to perform tasks.