Distinguish between best practices and recommended practices.

What will be an ideal response?

Answer:

Best practices are descriptions of what the best firms in the industry are doing about security. Recommended practices are prescriptive statements about what companies should do.