Which statement best distinguishes a policy from a procedure in security management?

Which statement best distinguishes a policy from a procedure in security management?

• A. A principle or rule that guides decisions
• B. A step-by-step instruction to implement rules
• C. A budget template for security projects
• D. A daily checklist for guards

Answer: (A)

Policy is the high-level rule that guides decisions and shapes how security is managed, providing intent, authority, and boundaries without dictating exact steps. It sets what must be done and why, so everyone understands the organization's stance. Procedures, by contrast, turn that policy into concrete actions, describing the exact steps, order, responsibilities, and documentation needed to implement the policy. A budget template relates to financial planning, not guiding security behavior, and a daily checklist is an operational tool used to carry out tasks rather than define guiding principles. So, the statement that best distinguishes a policy is that it expresses a principle or rule that guides decisions.

Policy is the high-level rule that guides decisions and shapes how security is managed, providing intent, authority, and boundaries without dictating exact steps. It sets what must be done and why, so everyone understands the organization's stance. Procedures, by contrast, turn that policy into concrete actions, describing the exact steps, order, responsibilities, and documentation needed to implement the policy. A budget template relates to financial planning, not guiding security behavior, and a daily checklist is an operational tool used to carry out tasks rather than define guiding principles. So, the statement that best distinguishes a policy is that it expresses a principle or rule that guides decisions.