O'Reilly logo
  • Thomas McLean thinks this is interesting:

Policies are broad overviews, whereas standards, baselines, guidelines, and procedures include more specific, detailed information on the actual security solution. Standards are the next level below security policies.