explain how different policies reinforce security and comply with industry best practices