For example, the large financial services corporation had divided its information security rules into policies and standards.
The corporation divided information security rules into different standards.