A common technique for making organizational information security policies more useful was to divide them into two broad concise high-level policies and more detailed information referred to as guidelines or standards .
If they weren 't divided into two broad policies they would have been of no use .