| Security guidelines define the objectives and constraints for the security program. Guidelines are created at several levels, ranging from company or corporate policy to specific operational constraints (e.g., remote access). In general, guidelines provide answers to the questions “what” and “why” without dealing with “how.” Guidelines are normally stated in terms that are technology-independent. |