Step-by-step instructions used to satisfy control requirements is called a:

A policy is a high-level statement of management's intent and expectations regarding security, not detailed step-by-step instructions.

A standard specifies mandatory requirements for hardware, software, or configurations to ensure consistency, but it does not provide step-by-step instructions.

A guideline provides recommendations and best practices, offering flexibility, rather than mandatory, step-by-step instructions.

A procedure provides detailed, step-by-step instructions on how to perform a specific task or process. These instructions ensure consistent adherence to policies and standards, thereby satisfying specific control requirements through repeatable actions.