Guidelines

The guidelines consist of suggested actions to consider for supporting the standards and achieving the policy objectives. The guidelines are non-mandatory controls, which can be viewed as best practices giving the flexibility in applying the policy while leaving the door open for creativity that should be limited within the boundaries of the functional and non-functional guidelines.