Which of the following would a security administrator use to comply with a secure baseline during a patch update?

A Standard Operating Procedure (SOP) provides detailed, step-by-step instructions for performing routine tasks, such as patch updates, ensuring consistency and compliance with established security baselines. It outlines the exact steps, configurations, and verification processes required to maintain security. An Information Security Policy sets high-level rules but doesn't detail implementation steps. Service-Level Expectations define performance metrics but not the process for achieving them. A Test Result Report documents the outcome of testing but isn't the document used to guide the update process itself.