Christina has prepared a document that includes high-level statements about how her orga- nization will handle major incidents and what its overall stance on incidents is. What has she created?

Policies are distinct from procedures and standards because they include high-level state- ments of intent rather than specific practices. Procedures document the practices an organi- zation will use, whereas standards set expectations or specific configurations or details about how something is done or set up.