In principle, the following applies:
General measures are relevant for your organization or individual parts of it, regardless of processing activities.
Processing-specific measures are only relevant for individual or several processing activities and go beyond the protection of general measures.
For more information on the use of processing-specific measures, please also read our article on this.