A NPE is generated if the "objectPolicy" parameter is not present in the request. Check for null also.