Main Categories of an In-Depth Cybersecurity Policy

In 200 or more words for each answer, respond to the following:
What are the main categories of an in-depth cybersecurity policy?
How would a well-designed cybersecurity policy program help secure a government agency, such as the Department of Homeland Security (DHS)?
What are some challenges to making sure everyone in an organization follows the cybersecurity policy?