Main covered topics by the policies are Information Security, Security Incident Management, IT Change & Configuration management, Backup, Hardening, Logging, Cloud Security, BYOD Management and Removable Devices.