What are procedures?

Procedures are mandatory actions to establish required actions and processes to comply with a policy, support compliance with applicable laws and regulations, and mitigate risk. Generally, procedures accompany policies and are approved together. In those exceptions when procedures are developed at a later date, the procedures must be vetted through the prescribed policy review and approval process.