40. How could an organization use various security standards to achieve total security? 41. Security policy is one of the 11 main areas covered by ISO 27002. A security policy can be developed for organizations and organizational subunits such as divisions and departments. What is an example of a security policy that could be applied to a single department?