Which document type is mandatory and specifies uniform use of particular technologies, such as requiring AES-256 for data at rest?

1. APolicy statement of intent
2. BProcedure for a single task
3. CGuideline
4. DStandard