For example, the large financial services corporation had divided its information security rules into policies and standards.
The corporation divided information security rules into 27 different standards.