The security $\_\_\_\_\_\_\_\_$ is at the top of the proverbial food chain. However, the security $\_\_\_\_\_\_\_\_\_$ is a direction about how they should be implemented. The latter is typically set aside to provide guidance for organizations through standards bodies such as $($NIST$).$

Group of answer choices

policy, standard

standard, policy

procedure $,$ standard

policy, procedure