Policy-based controls are fantastic, but you now have a separate constraint coming in from the side which is compliance. More powerful management tools give you easier changes, but then you have to beef up the audit trail and show your managers and auditors the mapping between your stated policies and the measurements coming up from what's really happening.

Dave Clarke