In cybersecurity and compliance, Policy, Procedure, Standard, Baseline, and Guideline serve distinct but interconnected roles. A Policy is a high-level document that defines an organization's rules and expectations for security, governance, or operations. It provides a framework for decision-making and compliance. A Procedure is a step-by-step set of instructions that explain how to implement a policy effectively, ensuring consistency in execution. A Standard defines specific, mandatory technical or operational requirements, such as encryption levels or password complexity.