SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-procedure-detailed-steps

Which governance document gives detailed, step-by-step instructions for carrying out a security task?

A procedure. Policies are broad, standards are mandatory, and guidelines are advice.

Start playing free

  1. Procedure ✔
  2. Policy
  3. Standard

Why: Policies state broad goals. Standards and guidelines specify technologies and methods. Procedures are the detailed steps to complete a task, such as how to onboard a new user account.

Huh, didn't know that: NIST says standards are normally compulsory within an organization.

The dad joke
A policy tells you to lock the door. A procedure tells you which hand to use. A guideline suggests you try the left.
Like this card?
Play the game

References

Answer: Procedure. Policies state broad goals. Standards and guidelines specify technologies and methods. Procedures are the detailed steps to complete a task, such as how to onboard a new user account.

  1. NIST SP 800-12 Rev. 1, An Introduction to Information Security nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-12r1.pdf
    Procedures are yet more detailed steps to be followed to accomplish security-related tasks.
    Checked 2026-10-10.
  2. NIST SP 800-12 Rev. 1, An Introduction to Information Security nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-12r1.pdf
    Standards are normally compulsory within an organization.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacySplitting a sensitive task, like creating and approving payments, among different people is called what?Security & PrivacyWhich list names all six functions of NIST Cybersecurity Framework 2.0?Security & PrivacyBuying cyber insurance to shift financial loss to an insurer is which type of risk response?

That's stuff everyone should know.