Internal “rules” of a financial institution that define how employees are expected to conduct themselves and the operating rules of the financial institution or business. Policies, including sanctions compliance policies, are general statements of intent and action, generally requiring implementing procedures.