Procedure is the detailed steps to make policy happen: What is critical data? Where is it stored? What is a "regualr basis", and how do you insert the tape in the drive? What is the command you type? Where do we store the tape? Who does test recoveries? etc.