1. A rule that an administrator places on the system, providing a way for an administrator to customize applications to organization-specific needs; policies are rules that govern the management of resources.
2. (Security.) A long-term, broad strategy, with detail on interpretation and implementation.