• Standards: general guidelines, non-prescriptive.
Shall vs should.
• Procedures: derived from general guidelines of
standards, but business specific applications.
• Certification: based on audit inspection process
to ascertain compliance with criteria assessment
factors as derived and formulated from the
general guidelines.