
222 Handbook of SCADA/Control Systems Security
be reached in order to demonstrate the extent to which that intent is being met, the
procedure provides a “roadmap” to complete a task as efciently
*
and effectively
as possible. Procedures are also used as a basis for quality assurance activities by
assisting analysts or auditors in determining if the outcome was arrived at through
asound, proven, and approved process.
Guidelines are used to provide some level of advice to those performing the
tasks. They are a “Recommended practice that allows some discretion or leeway in
its interpretation, implementation, or use” (BusinessDictionary.com, 20