Which term refers to detailed step-by-step instructions designed to ensure personnel can perform a given action?

• A. Policies
• B. Procedures
• C. Standards
• D. Guidelines

Answer: (B)

Detailed, step-by-step instructions that tell personnel exactly how to perform a task are called procedures. This term implies an actionable sequence, clearly defining each action, the order, who does it, what tools are needed, what records to update, and what to verify before moving on. Procedures are designed to be repeatable and auditable so anyone following them arrives at the same result every time, which is essential for consistent security operations, incident response, and routine tasks. For example, a password reset procedure would outline pre-conditions, the exact steps to verify identity, update records, notify the user, and document the outcome. Policies give high-level rules, standards lay out mandatory criteria, and guidelines offer recommended practices, but they don’t prescribe the exact steps to perform a task as procedures do.