A policy is a written statement of principles, rules, and commitments which an organisation follows to achieve a desired outcome.

The capacity or ability to direct or influence the behaviour of others or the course of events.

Pro-active reporting (sometimes known as whistleblowing) is when a person reports activity that is illegal, immoral, unsafe, or fraudulent. This usually involves escalating the issue, when the person isn't satisfied it has been dealt with using normal channels. To encourage pro-active reporting, it is important that there is no retaliation for reporting, and protections are in place for whistleblowers.

Procedures give details of the specific actions needed for carrying out a policy. They tell people in the organisation how to 'proceed'.