Discuss one example of a common security policy topic, which would probably be implemented differently in a private company compared with a public sector government agency.