Security Standards, Baselines, and Guidelines

The security standards, baselines, and guidelines are constructed on the documentation from the security policies. This documentation is more specific and goes more in depth.

Standard

A standard defines obligatory requirements for the use of hardware, software, technology, and security controls. This allows personnel in an organization to follow a course of action by which technology and procedures are uniformly implemented.

Baselines

A baselines is a minimum level of security that all assets in an organization must meet. Essentially it is a rule set forward that all implemented assets must meet that minimum level and if not met should be removed until brought up to baseline.

Guidelines

A guideline is a recommendation on how standards and baselines are implemented and serves as an operational guide for the organization.