Specific, mandatory controls or rules to support and comply with a policy are known as standards.
This is because standards define the minimum level of performance or behavior that is expected
from an organization or its employees in order to achieve a policy objective or requirement.
Standards also provide clear and measurable criteria for auditing and monitoring compliance with
policies. The other options are not specific, mandatory controls or rules to support and comply with a
policy, but rather different types of documents or tools that provide guidance or recommendations
for implementing policies or controls, such as frameworks (A), guidelines (B), or baselines C.
