The University of SydneyPage 3Security Strategy Levels–Strategy–Strategy refers to managerial processes–Cannot be delegated–Policy–Policy refers to contingent decisions–Generallya guideline document–Policy can be delegated–Program–Program is about a time-phased action sequence–Project is a component of a program–Operating procedure–Operating procedure is used for repetitive actions with predetermined outcome