A healthcare organization is developing its compliance program.Which of the following BEST distinguishes between policies and procedures?