I like Network Attacks and Exploitation: A Framework by Matthew Monte. It makes a clear and comprehensible case about the various asymmetries in cybersecurity and gives a detailed overview of failed past strategies, and strategies currently being tried.

I kinda like the Bruce Scheiner books but they're mostly examples of security failures.

Not exactly what you asked for but I always recommend The Cuckoo's Egg by Cliff Stoll whenever hacking comes up. And he deals with the early days of computer networks when there basically was no cybersecurity, policy or otherwise.

> policy (Government, Politics & Diplomacy) a plan of action adopted or pursued by an individual, government, party, business, etc [1]

Are you genuinely interested in a book on policy? (If not, I might have some recommendations, depending on what you're interested in).

If so, you might need to adjust your expectation bar toward the lower spectrum. I honestly can't imagine a book about policy that isn't trash, but maybe that's just me.

[1]: freedictionary.com

This might be a cliché answer, but the (ISC)2 CISSP CBK Reference. Among cybersecurity certifications, the CISSP is notable for it's focus on cybersecurity policy laws & implementation frameworks.