CISM: Certified Information Security Manager

Standards define mandatory, specific security requirements that can be applied consistently to solutions, such as when encryption is required for particular data classifications or locations. Policies provide higher-level direction, guidelines are advisory, and procedures describe implementation steps.