Certified Information Systems Auditor (CISA) Cert Guide

Appendix B. Memory Tables

Chapter 2

TABLE 2-3 Description of Standards, Procedures, Guidelines, and Baselines

Title	Description
Mandatory actions, explicit rules, or controls that are designed to support and conform to a policy. A standard should make a policy more meaningful and effective by including accepted specifications for hardware, software, or behavior. Standards should always point to the policy to which they relate.
Written steps to execute policies through specific, prescribed actions; this is the how in relation to a policy. Procedures tend to be more detailed than policies. They identify the method and state, in a series of steps, exactly how to accomplish an intended task, achieve a desired business or functional outcome, ...