What is the difference between a policy and a procedure? Why is it important for an organization to have a set of policies and procedures? Should management regularly review these policies and procedures? Why or why not?

What is the difference between a policy and a procedure? Why is it important for an organization to have a set of policies and procedures? Should management regularly review these policies and procedures? Why or why not?