Policies are the set of rules, regulations, standards and strategy that employees must follow.
They dictate:
When a procedure must be followed.
Who may or may not enact a procedure.
Which external standards and regulations must followed, including legal requirements health standards.
Management requirements and expectations.
Behavior expected from employees of the organization.
Terms for clients of the organization.