1. Create a business policy