Relationship between a policy, standard, guideline, and procedure
May 16, 2009 by Marcos Christodonte II
After a recent conversation explaining the relationship between a standard and guideline, I thought I’d post this diagram which clearly shows the relationship, at that of policies and procedures.
Source: CISA Certified Information Systems Auditor Study Guide
This model explains the relationship between a policy and procedure perfectly! Thanks.
Intrinsically, it seems to me the a standard is a high order entity from which policy is derived, thus it was very interesting to review this diagram and reflect. Not sure that the particular arrows or flow in this diagram necessarily goes again my initial statement.
I review standards established by my peers, the industry, and then from that establish our own internal policy. Based upon standards, here is our policy.
I do think that from a communication perspective, it might make sense to reverse the order for clarity and consistency.
“Here is the policy… it is derived from the following standard.”.
Just a thought…