For policies that apply to the entire organization, there's only one policy; you can't create a new one, but you can edit it:
You can set URLs to block, which will be applied to email, as well. You can also activate safe links in Office 365 desktop/laptop and mobile applications. Determine whether or not you will track when users click safe links, and decide whether users can click through safe links to the original URL.