Procedures are step-by-step instructions in support of of the policies, standards,
guidelines and baselines. The procedure indicates how the policy will be implemented and who
does what to accomplish the tasks."
Standards is incorrect. Standards are a "Mandatory statement of minimum requirements that
support some part of a policy, the standards in this case is your own company standards and not
standards such as the ISO standards"
Guidelines is incorrect. "Guidelines are discretionary or optional controls used to enable
individuals to make judgments with respect to security actions."
Baselines is incorrect. Baselines "are a minimum acceptable level of security. This minimum is
implemented using specific rules necessary to implement the security controls in support of the
policy and standards." For example, requiring a password of at leat 8 character would be an
example. Requiring all users to have a minimum of an antivirus, a personal firewall, and an anti
spyware tool could be another example.
References:
CBK, pp. 12 - 16. Note especially the discussion of the "hammer policy" on pp. 16-17 for the
differences between policy, standard, guideline and procedure.
AIO3, pp. 88-93.

As stated in the dictionary, here are 3 definitions of procedure:
Its pretty visible that this is the term we are looking for as stated in the questions, you can check
your CISSP documentation too.

Section: Mixed questions
Explanation/Reference: https://searchsecurity.techtarget.com/definition/role-based-access-control-RBAC

User provisioning refers to the creation, maintenance, and deactivation of user
objects and attributes as they exist in one or more systems, directories, or applications, in
response to business processes.
User provisioning software may include one or more of the following components: change
propagation, self-service workflow, consolidated user administration, delegated user
administration, and federated change control.
User objects may represent employees, contractors, vendors, partners, customers, or other
recipients of a service.
Services may include electronic mail, access to a database, access to a file server or mainframe,
and so on
The following answers are all incorrect answers:
Creation and deactivation of user accounts
Maintenance and deactivation of user objects and attributes
Delegating user administration
The following reference(s) were/was used to create this question:
Harris, Shon (2012-10-18). CISSP All-in-One Exam Guide, 6th Edition (p. 179). McGraw-Hill .
Kindle Edition.