Statements adopted by an organization to establish minimum requirements for adherence to laws, rules, risk management objectives. Policies are guiding principles that express the organization's culture, goals and philosophy. Policies promote consistency and operational efficiency, enhance the organization’s mission and mitigate significant association risk.

Generally, policies have supporting procedures. Compliance will be subject to monitoring.