For example , the large financial services corporation had divided its information security rules into policies and standards .
The corporation divided information security rules into different standards .