Question: what are the three general policy categories?
Answer: The three general categories of policies involved with information security are: (a) general or security program policies, (b) issue-specific security policies, and (C) system-specific security policies. A general or security program policy is the overarching information security policy for an organization.