What information security policy hierarchy has your organization adopted i.e., policy, standards, controls, procedures / secure baseline configuration?

Policies, Standards, Guidelines, Procedures

Policy sets goals, Standards define rules. Controls implement standards, procedures detail steps. Secure baseline config ensures compliance.