Which of the following is not a common security policy type?

A parking policy generally outlines parking provisions for employees and visitors. This includes the criteria and procedures for allocating parking spaces for employees and is not a part of organizational security policy. Instead, it is an operational or business policy. An acceptable use policy (AUP) describes the limits and guidelines for users to make use of an organization’s physical and intellectual resources. This includes allowing or limiting the use of personal email during work hours. Business continuity policies describe how the organi-zation approaches business continuity efforts, and incident response (IR) policies document the organization’s IR intentions and high-level goals.