Authoritative prescriptive statements that stipulate the requirements (what to do/what not to do) to comply with policy in specific situations. Under exceptional circumstances on a case-by-case basis, variations from standards require approval from a governing body.  Compliance will be subject to monitoring.