Security Policies, Standards, Procedures, and Guidelines

Policies, standards, procedures, and guidelines. All have their place and all fill a specific need, and you need all of them in order to have a successful Information Security Program.