Enforcement of Policy
Modularize technology solution and make the policy document technology-neutral
Design technology so that it supports the policy. (Not the other way around.)
Enlist the support of management and legal bodies for the policy
Have the policy focus on intent rather than details