Business policies define your governance model for your organization. Weak companies have weak governance models. So what business policies do you need?
Control systems that are designed only to achieve compliance are doing the bare minimum. How can you build an effective internal control system for success?
Sarbanes-Oxley (SOX) requires an internal control system. Yet the current financial crises indicates that the needed internal controls are not effectively implemented in many companies.