XYZ Company is a mid-sized Financial Technology (Fintech) company that operates in the Fintech consultation and services provisioning business. The company has a range of departments such as HR, Customer service, Research and Development, marketing and Finance. The company provides services to its clients either in B2B or B2C model such as financial advices in investment. It also provides payment settlements and insurance products. The management at XYZ Company was concerned about the risks associated with information security, especially given the sensitive financial data that the company handles. Hence, the company decided to implement an information risk management program to mitigate these risks

q1 . Write an enterprise information security policy and associate issue specific policy for XYZ?