Glossary: Policies, Standards and Risk Management

standard

Also written: standards, internal standard, external standard

A mandatory, specific and measurable requirement that supports a policy and can be checked with a yes or a no, such as "AES-256 on every laptop". Standards are internal (your own) or external (from outside bodies).