How to properly prepare a column name if passed to a stored procedure?

How to properly prepare a column name if passed to a stored procedure?

tech