Which of the following system security policies is used to address specific issues of concern to the organization? Response:

A program policy, also known as a general security policy, provides a high-level overview of an organization's overall security program, rather than specific issues.

An issue-specific policy focuses on individual areas of concern, providing detailed guidance for specific topics like acceptable use, remote access, or password management. This policy type directly addresses particular issues that the organization deems critical for security.

Informative policies are not a standard classification of security policies; rather, policies themselves are informative documents.

A system-specific policy addresses the security requirements and controls for a particular information system or application, not general issues across the organization.