What term describes the low-level detailed actions that must be taken by specific employees?

• A. Procedures
• B. Processes
• C. Guidelines
• D. Standards

Answer: (A)

Procedures are the detailed, step-by-step instructions that specify exactly what each employee must do to perform a task. They lay out the precise actions, the order in which to perform them, who is responsible, what tools or forms to use, how to verify completion, and what to do in exception or error situations. This level of detail makes work consistent, repeatable, and auditable, which is crucial for security practices. For example, a procedure might outline the exact steps to create a new user account, including required approvals, configuration steps, and documentation to produce.

This differs from a process, which describes the broader sequence of activities and the roles involved to achieve a goal. Guidelines are recommended practices that can be adapted, not mandatory steps. Standards establish formal criteria or measurable requirements that must be met. So the term that matches the request for low-level, mandatory actions by specific employees is procedures.