Guidelines and Best Practices are recommendations. It can be a useful piece of advice, such as "To create a strong password, take the first letter of every word in a sentence, and mix in some numbers and symbols. 'You Can't Have Everything. Where Would You Put It?' becomes 'Uch3Wwup1?'" You are able to create a strong password without following this advice, which is why guidelines and best practices are not mandatory.
|Cloud Computing Guideline (CCG)|
|Checklist for Protecting Information Guideline|
|Information Security Incident Escalation Guideline|
|International Travel Data and Device Guideline|
|Data Security Rider|
|Electronic Media Data Removal Confirmation
|NIST 800-171 Compliance Guideline||PDF