When crafting a security strategy, to what extent should security professionals align database security policies with information security policies? Discuss the differences between the two and how you think the policies should be used. Give examples where possible.