Discuss the difference between general and specific policies.

What will be an ideal response?

General policies provide directional guidance in broad terms. They are given tangible effect through human-centered or technical controls. Because they are intended to be applied universally, the concrete implementation of a policy requires interpretation. A common security policy, such as acceptable use, is an example of a general policy that requires interpretation. The resulting controls that ensure acceptable use in day-to-day practice will depend on the situation or technology in question. On the other hand, specific policies, such as firewall criteria, apply to a particular situation or technology. Thus, a specific policy is narrowly constrained to a particular issue, and the implementation of the associated controls requires little interpretation.