4. Why Policies Exist

“An organisation writes a policy for tomorrow’s decision, not yesterday’s mistake.”

Few organisational artefacts are more misunderstood than the policy. In many organisations, policies are treated as administrative necessities: documents to satisfy auditors, demonstrate compliance or codify management’s preferences. They accumulate over time until they form an imposing library that few employees consult and even fewer understand. Their existence is accepted because organisations are expected to have policies, much as they are expected to have organisational charts or annual budgets. Yet this widespread acceptance conceals a more fundamental question. Why do policies exist at all?

The conventional answer is that policies define rules. While not incorrect, it explains remarkably little. Rules exist in countless forms, from laws and contracts to procedures and technical standards. A policy is something distinct. Organisations that fail to recognise this distinction frequently produce policies that are excessively detailed, operationally intrusive or disconnected from the decisions people actually make. The consequence is not simply poor documentation but degraded organisational performance. Employees either become dependent upon constant managerial interpretation or quietly ignore the policies altogether. In both cases, governance begins to fail because it no longer assists decision-making.

The true purpose of a policy only becomes apparent when viewed through the lens established in the preceding chapters. Organisations exist because people make decisions that unlock coordinated action. Information exists to support those decisions. Risk exists to improve their quality. Governance exists to create the conditions under which good decisions become more likely. Policies therefore occupy a very particular place within that architecture. They exist to reduce uncertainty before a decision is ever required. Their value lies not in controlling behaviour after the fact, but in shaping judgement before circumstances demand action.

Decisions Cannot Wait for Senior Management

Every organisation contains vastly more decisions than senior leaders could ever make themselves. A large enterprise may generate thousands of operational decisions each day, ranging from customer service interactions and procurement choices to technology changes, safety responses and financial approvals. Even strategic organisations operate through countless local decisions made by people who possess neither complete information nor unlimited authority. Attempting to centralise every important judgement quickly produces delay, managerial overload and organisational paralysis. Ironically, organisations become less controlled precisely because leaders insist on controlling too much.

Policies emerge as a practical response to this unavoidable reality. Rather than reserving every decision for senior management, the organisation establishes principles that allow competent people to act without seeking permission each time circumstances arise. A policy therefore represents delegated judgement. It captures decisions that leadership has already made about acceptable behaviour, acceptable risk and acceptable outcomes so that those decisions need not be repeated endlessly across the organisation.

Seen in this light, a policy is less a collection of instructions than a form of institutional memory. It records how the organisation wishes similar situations to be approached regardless of who occupies particular roles. Employees inherit not only responsibilities but also accumulated judgement. This continuity becomes increasingly valuable as organisations grow larger, more geographically dispersed and more dependent upon specialised expertise.

Policies Reduce Uncertainty Before Decisions Are Needed

Much organisational uncertainty does not arise because information is unavailable but because expectations are unclear. Individuals often understand the facts before them yet remain uncertain about what the organisation expects them to do. They hesitate because they cannot confidently predict whether a particular decision will later be criticised, reversed or second-guessed. The result is familiar to almost every organisation: decisions are delayed, escalated unnecessarily or avoided entirely.

The purpose of policy is to remove this uncertainty in advance. Instead of forcing employees to infer organisational expectations from precedent, personalities or organisational politics, a policy makes those expectations explicit. It establishes the boundaries within which judgement may safely operate. Within those boundaries individuals remain free to exercise professional discretion, but they no longer need to question whether the organisation fundamentally supports the direction of their decision.

This distinction is significant because uncertainty and complexity are not the same phenomenon. Policies cannot eliminate complexity. Real organisational decisions invariably involve incomplete information, competing objectives and changing circumstances. What policies can eliminate is uncertainty about the organisation’s intent. They answer questions such as what outcomes are preferred, what risks are acceptable and what principles take precedence when trade-offs become unavoidable. Complexity remains, but confusion is reduced.

Organisations therefore benefit from policies not because they simplify reality but because they clarify expectations before reality becomes complicated.

Policies Shape Human Decisions; Standards Shape Systems

One of the most persistent sources of governance confusion is the tendency to treat policies and standards as interchangeable. The distinction often appears semantic until organisations begin attempting to implement them. It is then that the practical consequences become apparent.

Policies primarily address people. They influence judgement by establishing principles, intentions and organisational expectations. Their audience consists of decision-makers. Whether those decision-makers are executives approving investments, managers recruiting employees or engineers evaluating suppliers, the policy provides the framework within which those decisions are expected to occur.

Standards perform a different function. They address consistency within systems, processes and technical implementations. Where a policy may state that information assets shall be protected appropriately according to their sensitivity, a standard specifies encryption algorithms, password requirements, network configurations or engineering tolerances. Compliance with a standard can often be objectively verified because the desired implementation is explicitly defined.

Confusing these two instruments produces predictable dysfunction. Policies become bloated with technical detail that rapidly becomes obsolete, while standards attempt to express organisational values that properly belong elsewhere. As technology evolves, organisations then discover that every technical improvement demands a policy review, transforming governance into an administrative bottleneck rather than an enabler of adaptation.

The distinction is therefore not merely editorial. Policies shape human decisions. Standards shape the systems through which those decisions are executed.

Good Policies Expand Organisational Autonomy

Many employees instinctively associate policies with restriction. They experience them as lists of prohibited actions or mandatory approvals that narrow rather than expand their discretion. This perception is understandable because poorly designed policies often do exactly that. They substitute detailed prescriptions for professional judgement, assuming that every foreseeable circumstance can be anticipated and documented.

Yet organisations cannot succeed through mechanical rule-following alone. Markets evolve, customers behave unpredictably, technology changes continuously and operational conditions differ from one situation to another. No policy can anticipate every future circumstance without becoming impossibly large. The attempt to do so simply replaces uncertainty with bureaucracy.

Well-designed policies recognise a different objective. Rather than specifying every permissible action, they establish stable principles from which informed decisions can be derived. Employees gain confidence because they understand not only what the organisation expects but why those expectations exist. As situations evolve, they remain capable of adapting their actions while remaining aligned with organisational intent.

The paradox is that good policies often increase organisational freedom. By reducing uncertainty about purpose, they reduce dependence upon constant supervision. Decisions can be taken closer to the point where information exists, allowing organisations to respond more rapidly without sacrificing consistency. Authority becomes distributed without becoming chaotic because the underlying decision framework remains common across the enterprise.

In this sense, policies do not constrain decentralised organisations. They make decentralisation possible.

The Measure of a Policy Is the Decisions It Enables

Organisations frequently evaluate policies according to administrative criteria. They ask whether a policy has been approved, published, acknowledged or reviewed on schedule. These activities may satisfy governance processes, but they reveal remarkably little about whether the policy actually fulfils its organisational purpose.

A more meaningful question asks what decisions the policy enables. Does it reduce unnecessary escalation? Does it improve consistency between similar decisions? Does it allow competent people to act with greater confidence? Does it shorten decision cycles while maintaining acceptable levels of risk? These questions evaluate the policy as part of the organisation’s decision architecture rather than merely as controlled documentation.

This perspective also explains why organisations often suffer from what appears to be policy overload despite possessing relatively little genuine governance. Hundreds of documents may exist, yet employees still seek approval for routine matters because the documents fail to resolve the uncertainties that actually impede decision-making. Governance activity increases while decision quality remains unchanged. Documentation expands, but organisational confidence does not.

Policies therefore deserve evaluation not by their existence but by their consequences. A policy that nobody consults before making decisions contributes little regardless of how frequently it is reviewed. Conversely, a concise policy that consistently enables sound judgement becomes one of the organisation’s most valuable governance assets.

Conclusion

Policies are often mistaken for instruments of control because they are observed primarily at the point where behaviour is constrained. Their more important contribution occurs much earlier. They shape the environment in which decisions are made, reducing uncertainty before choices become urgent and allowing authority to move closer to where information resides. In doing so, they transform governance from an exercise in supervision into an exercise in organisational design.

Understanding policies in this way changes both how they are written and how they are evaluated. They are no longer repositories of exhaustive instruction nor symbolic demonstrations of compliance. They become enduring expressions of organisational judgement, capturing the decisions leadership wishes never to revisit while empowering thousands of other decisions to proceed without hesitation.

The effectiveness of governance therefore depends less upon the number of policies an organisation possesses than upon whether those policies genuinely support better decisions. A policy succeeds when it quietly removes uncertainty from everyday work, allowing action to proceed with confidence. That outcome is entirely consistent with the broader philosophy developed throughout this book: governance exists because organisations improve when good decisions become easier to make.