Most technically-minded people skip this in interview prep.

And most of them regret it.

"What is the difference between a policy and a procedure?"

Policy = what must be done and why.

Standard = what exactly must be used.

Procedure = how to do it step by step.

Guideline = optional recommendation.

One is mandatory. One is optional. Most candidates mix them up.

And hiring managers for GRC, SOC, and engineering roles all ask this question.