Business Policies are sets of related business rules that govern the behavior of the Business Processes and the Business Entities and their relationships. Business systems can be thought of as Business Information that is acted upon by Business Processes which are both controlled by Business Policies. The structure of Business Information is the most stable of the three. Business Processes change more often than does the structure of Business Information. Business Policies are the most volatile of the three. Therefore, it is important to isolate these and to trace them to the IT components that enforce them.