A common technique for making organizational information security policies more useful was to divide them into two broad  concise high-level policies and more detailed information referred to as guidelines or standards.
In order to make organization information security policies more useful they were divided into two broad policies.
In order to make organization information policies less useful they were divided into 9 policies.