Which one of the following describes the fundamental differences between procedures, guidelines, policies, and standards?
A.
A policy is the senior management statement that dictates what type of role that security plays. Procedures are a complete set of instructions. Guidelines are recommendations and standards are rules.
B.
Procedures are managerial statements that dictate the policies for security and the standards and guidelines to be implemented.
C.
Standards are the policies that senior management dictates to help formulate the procedures to implement for security.
D.
Standards are recommended guidelines. Procedures are directly implemented as a consequence of the security policy dictated by senior management.
Explanation:
Security policies are statements that originate from senior
management. Standards are drawn up to provide uniform ways to carry out the
directives of the security policies. Guidelines are recommendations. Procedures are
detailed step-by-step actions.